This is an automated email from the ASF dual-hosted git repository.

gaoxingcun pushed a commit to branch a_small_change
in repository https://gitbox.apache.org/repos/asf/hertzbeat.git


The following commit(s) were added to refs/heads/a_small_change by this push:
     new 8b3b3ad94 modified:add a small change.
8b3b3ad94 is described below

commit 8b3b3ad9469238d2c20e1166950be033c40e548e
Author: tiejiaxiaobao <[email protected]>
AuthorDate: Sun Dec 15 23:27:06 2024 +0800

    modified:add a small change.
---
 .../apache/hertzbeat/collector/collect/database/JdbcCommonCollect.java | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git 
a/hertzbeat-collector/hertzbeat-collector-basic/src/main/java/org/apache/hertzbeat/collector/collect/database/JdbcCommonCollect.java
 
b/hertzbeat-collector/hertzbeat-collector-basic/src/main/java/org/apache/hertzbeat/collector/collect/database/JdbcCommonCollect.java
index c89020e87..b602d2cdc 100644
--- 
a/hertzbeat-collector/hertzbeat-collector-basic/src/main/java/org/apache/hertzbeat/collector/collect/database/JdbcCommonCollect.java
+++ 
b/hertzbeat-collector/hertzbeat-collector-basic/src/main/java/org/apache/hertzbeat/collector/collect/database/JdbcCommonCollect.java
@@ -296,7 +296,8 @@ public class JdbcCommonCollect extends AbstractCollect {
             // check whether the parameter is valid
             if (url.contains("create trigger") || url.contains("create alias") 
|| url.contains("runscript from")
                     || url.contains("allowloadlocalinfile") || 
url.contains("allowloadlocalinfileinpath")
-                    || url.contains("uselocalinfile")) {
+                    || url.contains("uselocalinfile") || 
url.contains("autodeserialize") || url.contains("detectcustomcollations")
+                    || url.contains("serverstatusdiffinterceptor")) {
                 throw new IllegalArgumentException("Invalid JDBC URL: contains 
malicious characters.");
             }
             // when has config jdbc url, use it 


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to