jianghang.loujh
cf97b2ae31
fix: mitigate SnakeYAML deserialization RCE and enforce default password change
...
1. Use SafeConstructor in ApplicationConfigMonitor to block arbitrary
object instantiation via YAML type tags (e.g. !!javax.script.ScriptEngineManager).
2. Detect default admin password (admin/123456) on login and enforce
password change before allowing any other API operations (code 50015).
🤖 Generated with [Qoder][https://qoder.com ]
2026-04-29 18:07:02 +08:00
jianghang.loujh
556d998db1
adjust preferIPv4Stack=false, support ipv6
2025-08-05 16:42:00 +08:00
jianghang.loujh
c15129b0ac
[maven-release-plugin] prepare for next development iteration
2025-01-16 16:07:08 +08:00
jianghang.loujh
0741ccda1e
[maven-release-plugin] prepare release canal-1.1.8
2025-01-16 16:07:00 +08:00
jianghang.loujh
923675aa49
fixed issue #5334 , adjust canal_manager default schema
2024-12-17 16:06:57 +08:00
JZ
fb3d2c6811
add compressionType,enableChunking for pulsar client , upgrade dependencies for security ( #5191 )
...
* add support for listener name which is described in https://pulsar.apache.org/docs/next/concepts-multiple-advertised-listeners/
* upgrade for CVE-2023-20883 CVE-2022-1471 CVE-2023-20860
* add enableChunking
* downgrade pulsar client version
* fix
* 增加压缩算法
2024-07-16 14:59:29 +08:00
jianghang.loujh
98677c5bc8
fixed issue #4941 , remove default passwd
2023-11-08 10:58:43 +08:00
jianghang.loujh
b322201889
[maven-release-plugin] prepare for next development iteration
2023-10-09 14:27:37 +08:00
jianghang.loujh
ea8949298f
[maven-release-plugin] prepare release canal-1.1.7
2023-10-09 14:27:33 +08:00
jianghang.loujh
6440b744f2
fixed arm64 stack size too small, upgrade all to 1m
2023-10-08 18:55:06 +08:00
jianghang.loujh
066b022bb3
fixed arm64 , support mysql 8.0
2023-10-08 17:51:56 +08:00
jianghang.loujh
a216b55010
fixed password length 6-digit limit
2023-09-02 11:12:09 +08:00
jianghang.loujh
d90066e01b
upgrade spring cloud & spring boot version
2023-09-01 19:51:49 +08:00
jianghang.loujh
681d03fbe7
upgrade dependency version for CVE
2023-09-01 13:59:05 +08:00
jianghang.loujh
c16d6e7729
sync canal-template.properties
2022-09-13 23:33:39 +08:00
jianghang.loujh
ef7e21e4b2
support jdk11
2022-09-01 18:27:19 +08:00
jianghang.loujh
2faecec749
fixed issue #4266 , typo
2022-09-01 13:02:02 +08:00
jianghang.loujh
7b8ff04d20
[maven-release-plugin] prepare for next development iteration
2022-05-24 10:26:12 +08:00
jianghang.loujh
7ee246ca5a
[maven-release-plugin] prepare release canal-1.1.6
2022-05-24 10:26:06 +08:00
jianghang.loujh
eef1ee85fb
fixed issue #4014 , support java8 & java11 G1 GC
2022-05-23 18:23:31 +08:00
jianghang.loujh
05a52f1bd3
upgrade log4j version
2022-05-20 16:58:20 +08:00
zhangshaoning
bd3224eea1
Upgrade reference log4j package version ( #4017 )
2022-05-13 12:22:45 +08:00
liteng2430
8114d77a20
Add verification: the user can set a password with a length of less than 6 digits when updating the password, but the password length must be greater than or equal to 6 digits when logging in to canal admin, so the length verification function when updating the login password is added ( #4103 )
2022-05-13 11:34:36 +08:00
温绍锦
ead91433d7
fastjson update 1.x to 2.0.2 ( #4160 )
2022-05-13 11:32:47 +08:00
willmao
8804647c30
avoid print password when logging ( #3969 )
2022-05-13 11:28:05 +08:00
agapple
5cc85ff2de
[maven-release-plugin] prepare for next development iteration
2021-04-19 15:48:20 +08:00
agapple
64862503ba
[maven-release-plugin] prepare release canal-1.1.5
2021-04-19 15:48:09 +08:00
agapple
1369418c6a
fixed code format & merge
2021-04-19 10:55:43 +08:00
zoemak
17f4ee13e7
自动注册时可自定义node server名称，canal.properties#canal.admin.register.name，为空则使用canal.register.ip ( #3459 )
2021-04-19 10:18:01 +08:00
agapple
b1dc3821ea
fixed config url auth
2021-04-16 21:52:23 +08:00
许道杰
846c8870ae
fix: issue #3076 ( #3077 )
2021-04-16 21:12:12 +08:00
zavakid
df24596092
= code cleanup
...
- for loop replaceable with enhanced 'for' loop
- using diamond in generic type
- collapse try catch exception
- using try-with-resource
- using List#sort instead of Collections#sort
- replaced lambda with method reference
- using native compare method to compare numbers
- using switch instead of if for in ESSyncUtil
2020-09-17 23:22:25 +08:00
zavakid
e7658879bc
= cold cleanup
...
* using lambda if possible (we are already building in Java8)
* using diamond when new generic instance
* remove used improt
2020-09-17 17:46:20 +08:00
agapple
b79af46054
merge code and fixed issue #2755 #2756 #2735 #2714 #2711 #2710 #2616 #2602 #2585 #2565 #2935 #2434 #2623 #2418 #2387
2020-08-22 13:07:24 +08:00
DinoZhang
72ae7ba8d7
meta admin ( #2836 )
2020-08-20 21:18:00 +08:00
agapple
523e8b85e6
format
2020-02-28 11:40:14 +08:00
agapple
31562919bb
rename canal-admin project to admin
2019-10-09 14:50:08 +08:00
