mirror of
https://github.com/vran-dev/databasir.git
synced 2025-09-17 17:16:56 +08:00
fix: security vulnerability SSRF (#256)
This commit is contained in:
@@ -60,7 +60,7 @@ public class DriverResources {
|
||||
try {
|
||||
Files.createDirectories(parentDirPath);
|
||||
} catch (IOException e) {
|
||||
log.error("下载驱动时创建目录失败", e);
|
||||
log.error("create directory for driver failed", e);
|
||||
throw DomainErrors.DOWNLOAD_DRIVER_ERROR.exception(e);
|
||||
}
|
||||
|
||||
@@ -97,8 +97,9 @@ public class DriverResources {
|
||||
}
|
||||
});
|
||||
} catch (RestClientException e) {
|
||||
log.error(parentDir + " download driver error", e);
|
||||
throw DomainErrors.DOWNLOAD_DRIVER_ERROR.exception(e.getMessage());
|
||||
String msg = String.format("download driver from %s to %s failed", driverFileUrl, parentDir);
|
||||
log.error(msg, e);
|
||||
throw DomainErrors.DOWNLOAD_DRIVER_ERROR.exception(msg);
|
||||
}
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user