This is an automated email from the ASF dual-hosted git repository.
github-bot pushed a commit to branch cn-site
in repository https://gitbox.apache.org/repos/asf/dubbo-website.git
The following commit(s) were added to refs/heads/cn-site by this push:
new 64c90dd5b41 deploy: 248d7f9ebfb04e75515d9039a59614508d9bbe23
64c90dd5b41 is described below
commit 64c90dd5b41273b4b6038a3d206f62e7fc5f9de8
Author: AlbumenJ <[email protected]>
AuthorDate: Mon Oct 21 02:19:40 2024 +0000
deploy: 248d7f9ebfb04e75515d9039a59614508d9bbe23
---
css/app.css | 2 +-
css/chunk-vendors.css | 2 +-
js/app.js | 3 +-
js/chunk-vendors.js | 37 +------------------------
sitemap.xml | 2 +-
zh-cn/index.xml | 2 +-
zh-cn/overview/notices/index.xml | 2 +-
zh-cn/overview/notices/serialization/index.html | 6 ++--
zh-cn/sitemap.xml | 2 +-
9 files changed, 11 insertions(+), 47 deletions(-)
diff --git a/css/app.css b/css/app.css
index 44c2a2c2469..b9457c8de14 100644
--- a/css/app.css
+++ b/css/app.css
@@ -1 +1 @@
-h3[data-v-76eccb7f]{margin:40px 0
0}ul[data-v-76eccb7f]{list-style-type:none;padding:0}li[data-v-76eccb7f]{display:inline-block;margin:0
10px}a[data-v-76eccb7f]{color:#42b983}.form-layout[data-v-76eccb7f]{display:flex;justify-content:space-between;align-items:flex-start}.left-form[data-v-76eccb7f]{flex:1;max-width:calc(50%
-
20px);margin-right:20px}.right-text[data-v-76eccb7f]{flex-shrink:0;width:calc(50%
- 20px)}.left-form
.el-form-item__label[data-v-76eccb7f]{text-align:left}.left-form [...]
\ No newline at end of file
+/*Respond to static link checks, which will be dynamically replaced at build
time*/
\ No newline at end of file
diff --git a/css/chunk-vendors.css b/css/chunk-vendors.css
index 61c66238ea8..b9457c8de14 100644
--- a/css/chunk-vendors.css
+++ b/css/chunk-vendors.css
@@ -1 +1 @@
-@font-face{font-family:element-icons;src:url(../fonts/element-icons.ff18efd1.woff)
format("woff"),url(../fonts/element-icons.f1a45d74.ttf)
format("truetype");font-weight:400;font-display:"auto";font-style:normal}[class*="
el-icon-"],[class^=el-icon-]{font-family:element-icons!important;speak:none;font-style:normal;font-weight:400;font-variant:normal;text-transform:none;line-height:1;vertical-align:baseline;display:inline-block;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:gr
[...]
\ No newline at end of file
+/*Respond to static link checks, which will be dynamically replaced at build
time*/
\ No newline at end of file
diff --git a/js/app.js b/js/app.js
index 20f0c814e65..069248774b1 100644
--- a/js/app.js
+++ b/js/app.js
@@ -1,2 +1 @@
-(function(){"use strict";var t={9763:function(t,e,s){var
r=s(2856),l=function(){var t=this,e=t._self._c;return
e("div",{attrs:{id:"app"}},[e("el-row",[e("el-col",{attrs:{span:24}},[e("div",{staticStyle:{"font-size":"30px"}},[t._v("Dubbo
基准测试")])])],1),e("el-row",[e("el-col",{attrs:{span:24}},[e("div",{staticStyle:{"font-size":"15px","text-align":"right"}},[e("a",{attrs:{target:"_blank",href:"https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners/about-
[...]
-//# sourceMappingURL=app.b9807eee.js.map
\ No newline at end of file
+// Respond to static link checks, which will be dynamically replaced at build
time
\ No newline at end of file
diff --git a/js/chunk-vendors.js b/js/chunk-vendors.js
index fb67251dec6..069248774b1 100644
--- a/js/chunk-vendors.js
+++ b/js/chunk-vendors.js
@@ -1,36 +1 @@
-(self["webpackChunkdubbo_benchmark"]=self["webpackChunkdubbo_benchmark"]||[]).push([[504],{1656:function(e,t,n){"use
strict";function i(e,t,n,i,r,o,a,s){var l,u="function"===typeof
e?e.options:e;if(t&&(u.render=t,u.staticRenderFns=n,u._compiled=!0),i&&(u.functional=!0),o&&(u._scopeId="data-v-"+o),a?(l=function(e){e=e||this.$vnode&&this.$vnode.ssrContext||this.parent&&this.parent.$vnode&&this.parent.$vnode.ssrContext,e||"undefined"===typeof
__VUE_SSR_CONTEXT__||(e=__VUE_SSR_CONTEXT__),r&& [...]
-/**
- * @license
- * Lodash <https://lodash.com/>
- * Copyright JS Foundation and other contributors <https://js.foundation/>
- * Released under MIT license <https://lodash.com/license>
- * Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>
- * Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters &
Editors
- */(function(){var o,a="4.17.10",s=200,l="Unsupported core-js use. Try
https://npms.io/search?q=ponyfill.",u="Expected a
function",c="__lodash_hash_undefined__",h=500,d="__lodash_placeholder__",p=1,f=2,g=4,v=1,m=2,y=1,b=2,_=4,x=8,w=16,S=32,C=64,k=128,M=256,T=512,D=30,I="...",O=800,A=16,E=1,P=2,L=3,N=1/0,R=9007199254740991,$=17976931348623157e292,z=NaN,V=4294967295,F=V-1,B=V>>>1,j=[["ary",k],["bind",y],["bindKey",b],["curry",x],["curryRight",w],["flip",T],["partial",S],["partialRight",C],
[...]
-/*!
- * jQuery JavaScript Library v3.7.1
- * https://jquery.com/
- *
- * Copyright OpenJS Foundation and other contributors
- * Released under the MIT license
- * https://jquery.org/license
- *
- * Date: 2023-08-28T13:37Z
- */
-function(t,n){"use strict";"object"===typeof
e.exports?e.exports=t.document?n(t,!0):function(e){if(!e.document)throw new
Error("jQuery requires a window with a document");return
n(e)}:n(t)}("undefined"!==typeof window?window:this,(function(n,o){"use
strict";var a=[],s=Object.getPrototypeOf,l=a.slice,u=a.flat?function(e){return
a.flat.call(e)}:function(e){return
a.concat.apply([],e)},c=a.push,h=a.indexOf,d={},p=d.toString,f=d.hasOwnProperty,g=f.toString,v=g.call(Object),m={},y=function(e)
[...]
-/**
- * Checks if an event is supported in the current execution environment.
- *
- * NOTE: This will not work correctly for non-generic events such as `change`,
- * `reset`, `load`, `error`, and `select`.
- *
- * Borrows from Modernizr.
- *
- * @param {string} eventNameSuffix Event name, e.g. "click".
- * @param {?boolean} capture Check if the capture phase is supported.
- * @return {boolean} True if the event is supported.
- * @internal
- * @license Modernizr 3.0.0pre (Custom Build) | MIT
- */
-function o(e,t){if(!r.canUseDOM||t&&!("addEventListener"in
document))return!1;var n="on"+e,o=n in document;if(!o){var
a=document.createElement("div");a.setAttribute(n,"return;"),o="function"===typeof
a[n]}return!o&&i&&"wheel"===e&&(o=document.implementation.hasFeature("Events.wheel","3.0")),o}r.canUseDOM&&(i=document.implementation&&document.implementation.hasFeature&&!0!==document.implementation.hasFeature("","")),e.exports=o},9030:function(e,t,n){"use
strict";var i=n(8656),r=n(2021),o= [...]
-//# sourceMappingURL=chunk-vendors.c8f5525d.js.map
\ No newline at end of file
+// Respond to static link checks, which will be dynamically replaced at build
time
\ No newline at end of file
diff --git a/sitemap.xml b/sitemap.xml
index 29b24d6e3dd..8bec9b0491c 100644
--- a/sitemap.xml
+++ b/sitemap.xml
@@ -1 +1 @@
-<?xml version="1.0" encoding="utf-8" standalone="yes"?><sitemapindex
xmlns="http://www.sitemaps.org/schemas/sitemap/0.9";><sitemap><loc>https://cn.dubbo.apache.org/zh-cn/sitemap.xml</loc><lastmod>2024-10-11T13:41:04+08:00</lastmod></sitemap><sitemap><loc>https://cn.dubbo.apache.org/en/sitemap.xml</loc><lastmod>2024-10-11T13:41:04+08:00</lastmod></sitemap></sitemapindex>
\ No newline at end of file
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><sitemapindex
xmlns="http://www.sitemaps.org/schemas/sitemap/0.9";><sitemap><loc>https://cn.dubbo.apache.org/zh-cn/sitemap.xml</loc><lastmod>2024-10-21T10:14:13+08:00</lastmod></sitemap><sitemap><loc>https://cn.dubbo.apache.org/en/sitemap.xml</loc><lastmod>2024-10-11T13:41:04+08:00</lastmod></sitemap></sitemapindex>
\ No newline at end of file
diff --git a/zh-cn/index.xml b/zh-cn/index.xml
index 836ab659df0..ef25ab34bcb 100644
--- a/zh-cn/index.xml
+++ b/zh-cn/index.xml
@@ -8674,7 +8674,7 @@ Dubbo 框架自身并不能直接保证目标序列化机制的安全性。</
<li>JDK</li>
<li>Protocol Buffers</li>
</ul>
-<p>处于安全性考虑，从 Dubbo 3.3 开始将默认仅提供以下序列化协议支持：</p>
+<p>出于安全性考虑，从 Dubbo 3.3 开始将默认仅提供以下序列化协议支持：</p>
<ul>
<li>Hessian2</li>
<li>Fastjson2</li>
diff --git a/zh-cn/overview/notices/index.xml b/zh-cn/overview/notices/index.xml
index 17f5d6446ff..36bff4ddf11 100644
--- a/zh-cn/overview/notices/index.xml
+++ b/zh-cn/overview/notices/index.xml
@@ -28,7 +28,7 @@ Dubbo 框架自身并不能直接保证目标序列化机制的安全性。</
<li>JDK</li>
<li>Protocol Buffers</li>
</ul>
-<p>处于安全性考虑，从 Dubbo 3.3 开始将默认仅提供以下序列化协议支持：</p>
+<p>出于安全性考虑，从 Dubbo 3.3 开始将默认仅提供以下序列化协议支持：</p>
<ul>
<li>Hessian2</li>
<li>Fastjson2</li>
diff --git a/zh-cn/overview/notices/serialization/index.html
b/zh-cn/overview/notices/serialization/index.html
index cdf7e1a3e55..b86a85b8dda 100644
--- a/zh-cn/overview/notices/serialization/index.html
+++ b/zh-cn/overview/notices/serialization/index.html
@@ -1,5 +1,5 @@
<!doctype html><html lang=zh-cn class=no-js><head><meta name=ROBOTS
content="INDEX, FOLLOW"><link rel=alternate hreflang=en
href=https://cn.dubbo.apache.org/en/overview/notices/serialization/><link
rel=canonical
href=https://cn.dubbo.apache.org/zh-cn/overview/notices/serialization/><script>var
_hmt=_hmt||[];(function(){var
e,t=document.createElement("script");t.src="https://hm.baidu.com/hm.js?3b78f49ba47181e4d998a66b689446e9",e=document.getElementsByTagName("script")[0],e.parentNode.inse
[...]
-<meta property="og:site_name" content="Apache Dubbo"><meta property="og:title"
content="序列化安全"><meta property="og:description" content="在 Dubbo
中更安全的使用序列化协议"><meta property="og:locale" content="zh_cn"><meta
property="og:type" content="article"><meta property="article:section"
content="overview"><meta property="article:modified_time"
content="2023-12-15T14:39:05+08:00"><meta itemprop=name content="序列化安全"><meta
itemprop=description content="在 Dubbo 中更安全的使用序列化协议"><meta itemprop=dateModified
[...]
+<meta property="og:site_name" content="Apache Dubbo"><meta property="og:title"
content="序列化安全"><meta property="og:description" content="在 Dubbo
中更安全的使用序列化协议"><meta property="og:locale" content="zh_cn"><meta
property="og:type" content="article"><meta property="article:section"
content="overview"><meta property="article:modified_time"
content="2024-10-21T10:14:13+08:00"><meta itemprop=name content="序列化安全"><meta
itemprop=description content="在 Dubbo 中更安全的使用序列化协议"><meta itemprop=dateModified
[...]
<a class=dropdown-item href=/zh-cn/overview/notices/>安全公告</a>
<a class=dropdown-item href=/zh-cn/contact/>贡献者指南</a></div></li><li
class="nav-item nav-item-line px-2 mb-2 mb-lg-0"><a class=nav-link
href=/zh-cn/blog/><span>博客</span></a></li><li class="nav-item nav-item-line
px-2 mb-2 mb-lg-0"><a class=nav-link
href=/zh-cn/download/><span>下载</span></a></li><li class="nav-item dropdown
d-lg-block"><a class="nav-link dropdown-toggle" href=# id=navbarDropdown
role=button data-toggle=dropdown aria-haspopup=true
aria-expanded=false>生态</a><div class="dropdo [...]
<a class=dropdown-item href=/zh-cn/overview/mannual/control-plane/>可视化控制台</a>
@@ -629,9 +629,9 @@
<label for=m-zh-cnoverviewnoticeslog4j-check><a
href=/zh-cn/overview/notices/log4j/ class="align-left pl-0 td-sidebar-link
td-sidebar-link__page" id=m-zh-cnoverviewnoticeslog4j><span>Log4j
漏洞影响</span></a></label></li></ul></li></ul></li></ul></nav></div></div><main
class="col-12 col-md-9 col-xl-8 pl-md-5" role=main><nav aria-label=breadcrumb
class=td-breadcrumbs><ol class=breadcrumb><li class=breadcrumb-item><a
href=/zh-cn/overview/>文档</a></li><li class=breadcrumb-item><a href=/zh-cn/ove
[...]
数据反序列化是最容易被被攻击者利用的一个环节，攻击者利用它执行 RCE 攻击等窃取或破坏服务端数据。
用户在切换序列化协议或实现前， 应充分调研目标序列化协议及其框架实现的安全性保障，并提前设置相应的安全措施（如设置黑/白名单）。
-Dubbo 框架自身并不能直接保证目标序列化机制的安全性。</p><p>Dubbo 2.7
官方版本提供的序列化协议有如下几种：</p><ul><li>Hessian2</li><li>Fastjson</li><li>Kryo</li><li>FST</li><li>JDK</li><li>Protostuff</li><li>Protocol
Buffers</li><li>Avro</li><li>Gson</li></ul><p>从 Dubbo 3.0
开始默认仅提供以下序列化协议支持：</p><ul><li>Hessian2</li><li>JDK</li><li>Protocol
Buffers</li></ul><p>从 Dubbo 3.2
开始默认提供以下序列化协议支持：</p><ul><li>Hessian2</li><li>Fastjson2</li><li>JDK</li><li>Protocol
Buffers</li></ul><p>处于安全性考虑，从 Dubbo 3.3 开始将默认仅提供以下序列化协议支持：</p><ul><li>Hessia
[...]
+Dubbo 框架自身并不能直接保证目标序列化机制的安全性。</p><p>Dubbo 2.7
官方版本提供的序列化协议有如下几种：</p><ul><li>Hessian2</li><li>Fastjson</li><li>Kryo</li><li>FST</li><li>JDK</li><li>Protostuff</li><li>Protocol
Buffers</li><li>Avro</li><li>Gson</li></ul><p>从 Dubbo 3.0
开始默认仅提供以下序列化协议支持：</p><ul><li>Hessian2</li><li>JDK</li><li>Protocol
Buffers</li></ul><p>从 Dubbo 3.2
开始默认提供以下序列化协议支持：</p><ul><li>Hessian2</li><li>Fastjson2</li><li>JDK</li><li>Protocol
Buffers</li></ul><p>出于安全性考虑，从 Dubbo 3.3 开始将默认仅提供以下序列化协议支持：</p><ul><li>Hessia
[...]
该协议默认安全，但需要开发人员编写IDL文件。</p><p>Triple 协议 Wrapper
模式下，允许兼容其它序列化数据，提供了良好的兼容性。但其它协议可能存在反序列化安全缺陷，对于 Hessian2 协议，高安全属性用户应当按照 samples
代码指示，开启白名单模式，框架默认会开启黑名单模式，拦截恶意调用。</p><p>若必须使用其它序列化协议，同时希望具备一定安全性。应当开启Token鉴权机制，防止未鉴权的不可信请求来源威胁
Provider 的安全性。开启 Token 鉴权机制时，应当同步开启注册中心的鉴权功能。</p><p><a
href=/zh-cn/overview/mannual/java-sdk/advanced-features-and-usage/security/>加固参考</a></p><div
id=pre-footer><h2>反馈</h2><p class=feedback--prompt>此页是否对您有帮助？</p><button
class="btn btn-primary mb-4 feedback--yes">是</button>
-<button class="btn btn-primary mb-4
feedback--no">否</button></div><script>const
yes=document.querySelector(".feedback--yes"),no=document.querySelector(".feedback--no");document.querySelectorAll(".feedback--link").forEach(e=>{e.href=e.href+window.location.pathname});const
sendFeedback=e=>{gtag||console.log("!gtag"),gtag("event","click",{event_category:"Helpful",event_label:window.location.pathname,value:e})},disableButtons=()=>{yes.disabled=!0,yes.classList.add("feedback--button__disabled
[...]
+<button class="btn btn-primary mb-4
feedback--no">否</button></div><script>const
yes=document.querySelector(".feedback--yes"),no=document.querySelector(".feedback--no");document.querySelectorAll(".feedback--link").forEach(e=>{e.href=e.href+window.location.pathname});const
sendFeedback=e=>{gtag||console.log("!gtag"),gtag("event","click",{event_category:"Helpful",event_label:window.location.pathname,value:e})},disableButtons=()=>{yes.disabled=!0,yes.classList.add("feedback--button__disabled
[...]
<a
href="https://github.com/apache/dubbo-website/new/master/content/zh-cn//overview/notices/serialization?filename=change-me.md&value=---%0Atitle%3A+%22Long+Page+Title%22%0AlinkTitle%3A+%22Short+Nav+Title%22%0Aweight%3A+100%0Adescription%3A+%3E-%0A+++++Page+description+for+heading+and+indexes.%0A---%0A%0A%23%23+Heading%0A%0AEdit+this+template+to+create+your+new+page.%0A%0A%2A+Give+it+a+good+name%2C+ending+in+%60.md%60+-+e.g.+%60getting-started.md%60%0A%2A+Edit+the+%22front+matter%22+
[...]
<a
href="https://github.com/apache/dubbo-website/issues/new?title=%e5%ba%8f%e5%88%97%e5%8c%96%e5%ae%89%e5%85%a8";
target=_blank><i class="fab fa-github fa-fw"></i> 登记问题</a>
<a href=https://github.com/apache/dubbo/issues/new target=_blank><i class="fas
fa-tasks fa-fw"></i> 提交项目问题</a></div></div></div></div></div><footer><div
class=footer-container><div class=footer-container-left><div
class=footer-container-left-title>关注我们</div><div
class=footer-container-left-des>请通过以下任一或多个渠道关注社区动态，与社区开发者保持密切沟通。</div><div><button
class="contact-btn qr-container" onmouseover='showQRCode("wechat-qr")'
onmouseout='hideQRCode("wechat-qr")'>微信<div class=qr-code id=wechat-qr styl
[...]
diff --git a/zh-cn/sitemap.xml b/zh-cn/sitemap.xml
index c2a3c1b8ae2..54d579ecbd3 100644
--- a/zh-cn/sitemap.xml
+++ b/zh-cn/sitemap.xml
@@ -1 +1 @@
-<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset
xmlns="http://www.sitemaps.org/schemas/sitemap/0.9";
xmlns:xhtml="http://www.w3.org/1999/xhtml";><url><loc>https://cn.dubbo.apache.org/zh-cn/blog/2023/01/16/%E9%98%BF%E9%87%8C%E5%B7%B4%E5%B7%B4%E5%8D%87%E7%BA%A7-dubbo3-%E5%85%A8%E9%9D%A2%E5%8F%96%E4%BB%A3-hsf2/</loc><lastmod>2023-11-28T15:14:12+08:00</lastmod><changefreq>monthly</changefreq><priority>0.5</priority><xhtml:link
rel="alternate" hreflang="en" href="https://cn.dubbo [...]
\ No newline at end of file
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset
xmlns="http://www.sitemaps.org/schemas/sitemap/0.9";
xmlns:xhtml="http://www.w3.org/1999/xhtml";><url><loc>https://cn.dubbo.apache.org/zh-cn/blog/2023/01/16/%E9%98%BF%E9%87%8C%E5%B7%B4%E5%B7%B4%E5%8D%87%E7%BA%A7-dubbo3-%E5%85%A8%E9%9D%A2%E5%8F%96%E4%BB%A3-hsf2/</loc><lastmod>2023-11-28T15:14:12+08:00</lastmod><changefreq>monthly</changefreq><priority>0.5</priority><xhtml:link
rel="alternate" hreflang="en" href="https://cn.dubbo [...]
\ No newline at end of file
