zdh - 跃迁

zdh opened issue yueqian/yueqian-erp#10

2026-06-13 20:23:58 +08:00

[HIGH] BUG：OrderDataToChartListener.convertBizType 未知订单类型导致 NPE

zdh opened issue yueqian/yueqian-erp#7

2026-06-13 20:23:58 +08:00

[MEDIUM] 安全：文件上传仅校验扩展名，无内容类型/魔数验证

zdh opened issue yueqian/yueqian-erp#8

2026-06-13 20:23:58 +08:00

[HIGH] 安全：所有环境 useSSL=false 数据库通信明文传输

zdh opened issue yueqian/yueqian-erp#9

2026-06-13 20:23:58 +08:00

[HIGH] 性能：3 个 SelectorController 中存在 14 处 N+1 查询

zdh opened issue yueqian/yueqian-erp#2

2026-06-13 20:23:40 +08:00

[CRITICAL] 安全：所有 JDBC URL 启用 allowMultiQueries=true

zdh opened issue yueqian/yueqian-erp#3

2026-06-13 20:23:40 +08:00

[HIGH] 安全：ComponentController.getMapLocation 存在 SSRF 风险

zdh opened issue yueqian/yueqian-erp#4

2026-06-13 20:23:40 +08:00

[CRITICAL] 安全：加密秘钥 jugg.secret.key 硬编码

zdh opened issue yueqian/yueqian-erp#5

2026-06-13 20:23:40 +08:00

[HIGH] 安全：MyBatis ${} 动态表名存在 SQL 注入风险

zdh opened issue yueqian/yueqian-erp#6

2026-06-13 20:23:40 +08:00

[HIGH] 安全：多个 Selector 控制器端点缺少 @HasPermission

zdh opened issue yueqian/yueqian-erp#1

2026-06-13 20:23:27 +08:00

[CRITICAL] 安全：所有环境配置文件存在硬编码密码

zdh created branch main in yueqian/yueqian-erp

2026-06-13 20:21:16 +08:00

zdh pushed to main at yueqian/yueqian-erp

2026-06-13 20:21:16 +08:00