vanishxiaoma 最近的时间轴更新 vanishxiaoma 最近的时间轴更新 |
vanishxiaomaV2EX 第 202930 号会员，加入于 2016-11-25 14:01:25 +08:00 |
| java8 println() 奇怪的问题 Java • vanishxiaoma • 2021-11-02 13:34:51 PM • 最后回复来自 bonjourcs | 12 |
| jetbrains 对于盗版开始控制了 , 试用期都要登录账号了 无要点 • vanishxiaoma • 2021-10-20 15:23:43 PM • 最后回复来自 isFire | 30 |
| swagger3 统一返回泛型 ui 中不能正确展示 程序员 • vanishxiaoma • 2021-09-03 08:43:46 AM • 最后回复来自 youmilk | 7 |
| gradle clean build -x test 问题 编程 • vanishxiaoma • 2021-06-10 10:03:06 AM • 最后回复来自 AoEiuV020 | 1 |
| idea 鼠标自动移动到确认按钮上 编辑器 • vanishxiaoma • 2021-04-09 14:51:34 PM • 最后回复来自 aasdkl | 2 |
| 到底什么样的才叫全栈 问与答 • vanishxiaoma • 2021-03-23 13:10:14 PM • 最后回复来自 blackshow | 24 |
| 请求地址重复 没有报相关的异常 每次都是如下异常 Java • vanishxiaoma • 2019-12-24 16:15:31 PM • 最后回复来自 DJQTDJ | 4 |
| 做的多不如态度好 程序员 • vanishxiaoma • 2019-12-09 14:57:34 PM • 最后回复来自 lietoumai | 35 |
| 使用 mybatisplus 加代码生成器 直接生成 增加 删除 修改 查询 方法 Java • vanishxiaoma • 2019-11-21 18:05:33 PM |
| 有没有 swagger Java 热加载的插件 Java • vanishxiaoma • 2019-10-29 15:04:08 PM • 最后回复来自 chengyiqun | 1 |
vanishxiaoma 最近回复了
253 天前 回复了 YugenFring 创建的主题 › 程序员 › kotlin 可以完美平替 Java 吗? |
正在使用 kotlin 开发新的后端项目。使用感受写着比 java 爽太多
295 天前 回复了 pianjiao 创建的主题 › 职场话题 › 还在上班的举手🙋♂️ |
1
298 天前 回复了 Lyn321 创建的主题 › 职场话题 › 都陆续放假了，我还要连上四天，要吐了。。。。 |
没有对比就没有伤害，还有 6 天
298 天前 回复了 9seven 创建的主题 › 职场话题 › 今天最后一天班！准备放假 |
还有 6 天的投来羡慕的眼神
2023-03-21 13:04:27 +08:00 回复了 ziyouren 创建的主题 › 问与答 › 现在前端和 Java 真的未来堪忧么？ c++ 和 嵌入式市场怎么样？ |
java 早多少年都说要被淘汰了，这都多少年了还建在呢。变成没有必要说死守那门开发语言。编程最后都是拼的变成思想。开发语言只不过是实现你的逻辑而已
2022-07-27 16:26:01 +08:00 回复了 yibo2018 创建的主题 › 程序员 › 等待程序启动的时候大家在做啥 |
放空
北京 2 挂了
2021-12-13 10:45:12 +08:00 回复了 eviladan0s 创建的主题 › Java › 颤抖吧 Javaer， log4j 史诗级漏洞 |
https://logging.apache.org/log4j/2.x/
News
CVE-2021-44228
The Log4j team has been made aware of a security vulnerability, CVE-2021-44228, that has been addressed in Log4j 2.15.0.
Log4j’s JNDI support has not restricted what names could be resolved. Some protocols are unsafe or can allow remote code execution. Log4j now limits the protocols by default to only java, ldap, and ldaps and limits the ldap protocols to only accessing Java primitive objects by default served on the local host.
One vector that allowed exposure to this vulnerability was Log4j’s allowance of Lookups to appear in log messages. As of Log4j 2.15.0 this feature is now disabled by default. While an option has been provided to enable Lookups in this fashion, users are strongly discouraged from enabling it.
News
CVE-2021-44228
The Log4j team has been made aware of a security vulnerability, CVE-2021-44228, that has been addressed in Log4j 2.15.0.
Log4j’s JNDI support has not restricted what names could be resolved. Some protocols are unsafe or can allow remote code execution. Log4j now limits the protocols by default to only java, ldap, and ldaps and limits the ldap protocols to only accessing Java primitive objects by default served on the local host.
One vector that allowed exposure to this vulnerability was Log4j’s allowance of Lookups to appear in log messages. As of Log4j 2.15.0 this feature is now disabled by default. While an option has been provided to enable Lookups in this fashion, users are strongly discouraged from enabling it.
2021-11-11 11:27:35 +08:00 回复了 EarthChild 创建的主题 › 程序员 › 问下 vscode 和 IDEA 的区别，因为 idea 没办法用重置插件了 |
社区版啊，完全够用。
2021-11-11 11:26:13 +08:00 回复了 EarthChild 创建的主题 › 程序员 › 问下 vscode 和 IDEA 的区别，因为 idea 没办法用重置插件了 |
@BeijingBaby license 满一年有终身当前版本能使用过的
Select Language