From 74e563da7fa6886449fd2be5933e2d4ca5c85f48 Mon Sep 17 00:00:00 2001 From: jack <jack.su@pollex.com.tw> Date: 星期二, 12 九月 2023 11:25:52 +0800 Subject: [PATCH] [UPDATE] 解決弱點Se: Incorrect definition of Serializable class [UPDATE] 解決弱點Information exposure to log file [UPDATE] 解決弱點Use of hard-coded password --- pamapi/src/main/java/com/pollex/pam/config/ApplicationProperties.java | 128 +++++++++++------------------------------- 1 files changed, 35 insertions(+), 93 deletions(-) diff --git a/pamapi/src/main/java/com/pollex/pam/config/ApplicationProperties.java b/pamapi/src/main/java/com/pollex/pam/config/ApplicationProperties.java index d4b2b36..a20d500 100644 --- a/pamapi/src/main/java/com/pollex/pam/config/ApplicationProperties.java +++ b/pamapi/src/main/java/com/pollex/pam/config/ApplicationProperties.java @@ -1,5 +1,9 @@ package com.pollex.pam.config; +import com.pollex.pam.business.config.AppProperties; +import com.pollex.pam.business.config.SendEmailProperties; +import com.pollex.pam.business.config.SendSMSProperties; +import com.pollex.pam.business.enums.SendEmailMsgMethod; import org.springframework.boot.context.properties.ConfigurationProperties; /** @@ -9,7 +13,7 @@ * See {@link tech.jhipster.config.JHipsterProperties} for a good example. */ @ConfigurationProperties(prefix = "application", ignoreUnknownFields = false) -public class ApplicationProperties { +public class ApplicationProperties implements AppProperties { private boolean mockLogin; private String otpWebServiceUrl; @@ -19,10 +23,11 @@ private String eServiceLoginFunc; private String eServiceLoginSys; private String frontEndDomain; - private boolean sendNotifyMsg; - private SMS sms; - private Email email; + private SendSMSProperties sms; + private SendEmailProperties email; private String fileFolderPath; + private String aesKey; + private String defaultPaxxword; public boolean isMockLogin() { return mockLogin; @@ -88,107 +93,22 @@ this.frontEndDomain = frontEndDomain; } - public boolean isSendNotifyMsg() { - return sendNotifyMsg; - } - - public void setSendNotifyMsg(boolean sendNotifyMsg) { - this.sendNotifyMsg = sendNotifyMsg; - } - - public SMS getSms() { + public SendSMSProperties getSms() { return sms; } - public void setSms(SMS sms) { + public void setSms(SendSMSProperties sms) { this.sms = sms; } - public Email getEmail() { + public SendEmailProperties getEmail() { return email; } - public void setEmail(Email email) { + public void setEmail(SendEmailProperties email) { this.email = email; } - public static class SMS { - private String url; - private String sourceCode; - private String sender; - private String smsType; - private String subject; - - public String getUrl() { - return url; - } - - public void setUrl(String url) { - this.url = url; - } - - public String getSourceCode() { - return sourceCode; - } - - public void setSourceCode(String sourceCode) { - this.sourceCode = sourceCode; - } - - public String getSender() { - return sender; - } - - public void setSender(String sender) { - this.sender = sender; - } - - public String getSmsType() { - return smsType; - } - - public void setSmsType(String smsType) { - this.smsType = smsType; - } - - public String getSubject() { - return subject; - } - - public void setSubject(String subject) { - this.subject = subject; - } - } - - public static class Email { - private String url; - private String functionId; - private String senderEmail; - - public String getUrl() { - return url; - } - - public void setUrl(String url) { - this.url = url; - } - - public String getFunctionId() { - return functionId; - } - - public void setFunctionId(String functionId) { - this.functionId = functionId; - } - - public String getSenderEmail() { - return senderEmail; - } - - public void setSenderEmail(String senderEmail) { - this.senderEmail = senderEmail; - } - } public String getFileFolderPath() { return fileFolderPath; } @@ -196,5 +116,27 @@ public void setFileFolderPath(String fileFolderPath) { this.fileFolderPath = fileFolderPath; } + + @Override + public String getAesKey() { + return aesKey; + } + + public void setAesKey(String aesKey) { + this.aesKey = aesKey; + } + + @Override + public String getDefaultPaxxword() { + return defaultPaxxword; + } + + public void setDefaultPaxxword(String defaultPaxxword) { + this.defaultPaxxword = defaultPaxxword; + } + + + + } -- Gitblit v1.8.0