Skip to content

Conversation

llw5181
Copy link

@llw5181 llw5181 commented Oct 28, 2024

企业微信文档回调事件”模板卡片事件推送“文档:https://developer.work.weixin.qq.com/document/path/90240#%E6%A8%A1%E6%9D%BF%E5%8D%A1%E7%89%87%E4%BA%8B%E4%BB%B6%E6%8E%A8%E9%80%81

【注意】:me.chanjar.weixin.cp.util.xml.XStreamTransformer#configWxCpXmlMessage方法增加了
xstream.allowTypes(new Class[]{String.class});
请留意该行代码是否存在xml序列化为java对象时的安全隐患
image

@binarywang binarywang added this to the 4.6.6 milestone Oct 29, 2024
@binarywang binarywang merged commit bf7356e into binarywang:develop Oct 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants