Skip to content

Conversation

llw5181
Copy link

@llw5181 llw5181 commented Oct 28, 2024

企业微信文档回调事件”模板卡片事件推送“文档:https://developer.work.weixin.qq.com/document/path/90240#%E6%A8%A1%E6%9D%BF%E5%8D%A1%E7%89%87%E4%BA%8B%E4%BB%B6%E6%8E%A8%E9%80%81

【注意】:me.chanjar.weixin.cp.util.xml.XStreamTransformer#configWxCpXmlMessage方法增加了
xstream.allowTypes(new Class[]{String.class});
请留意该行代码是否存在xml序列化为java对象时的安全隐患
image

@binarywang binarywang added this to the 4.6.6 milestone Oct 29, 2024
@binarywang binarywang merged commit bf7356e into binarywang:develop Oct 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants