■Eclipse中设定方法

　Maven

　　　Download Artifact Sources

■效果

---

■扩展

可以查看查看Log4j2的漏洞，JNDI注入相关的源码了。　

●2.14.1 存在漏洞

JndiLookup.java

/** Licensed to the Apache Software Foundation (ASF) under one or more* contributor license agreements. See the NOTICE file distributed with* this work for additional information regarding copyright ownership.* The ASF licenses this file to You under the Apache license, Version 2.0* (the "License"); you may not use this file except in compliance with* the License. You may obtain a copy of the License at**      http://www.apache.org/licenses/LICENSE-2.0** Unless required by applicable law or agreed to in writing, software* distributed under the License is distributed on an "AS IS" BASIS,* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.* See the license for the specific language governing permissions and* limitations under the license.*/
package org.apache.logging.log4j.core.lookup;import java.util.Objects;import javax.naming.NamingException;import org.apache.logging.log4j.Logger;
import org.apache.logging.log4j.Marker;
import org.apache.logging.log4j.MarkerManager;
import org.apache.logging.log4j.core.LogEvent;
import org.apache.logging.log4j.core.config.plugins.Plugin;
import org.apache.logging.log4j.core.net.JndiManager;
import org.apache.logging.log4j.status.StatusLogger;/*** Looks up keys from JNDI resources.*/
@Plugin(name = "jndi", category = StrLookup.CATEGORY)
public class JndiLookup extends AbstractLookup {private static final Logger LOGGER = StatusLogger.getLogger();private static final Marker LOOKUP = MarkerManager.getMarker("LOOKUP");/** JNDI resource path prefix used in a J2EE container */static final String CONTAINER_JNDI_RESOURCE_PATH_PREFIX = "java:comp/env/";/*** Looks up the value of the JNDI resource.* @param event The current LogEvent (is ignored by this StrLookup).* @param key  the JNDI resource name to be looked up, may be null* @return The String value of the JNDI resource.*/@Overridepublic String lookup(final LogEvent event, final String key) {if (key == null) {return null;}final String jndiName = convertJndiName(key);try (final JndiManager jndiManager = JndiManager.getDefaultManager()) {return Objects.toString(jndiManager.lookup(jndiName), null);} catch (final NamingException e) {LOGGER.warn(LOOKUP, "Error looking up JNDI resource [{}].", jndiName, e);return null;}}/*** Convert the given JNDI name to the actual JNDI name to use.* Default implementation applies the "java:comp/env/" prefix* unless other scheme like "java:" is given.* @param jndiName The name of the resource.* @return The fully qualified name to look up.*/private String convertJndiName(final String jndiName) {if (!jndiName.startsWith(CONTAINER_JNDI_RESOURCE_PATH_PREFIX) && jndiName.indexOf(':') == -1) {return CONTAINER_JNDI_RESOURCE_PATH_PREFIX + jndiName;}return jndiName;}
}

---

AbstractLookup.java

/** Licensed to the Apache Software Foundation (ASF) under one or more* contributor license agreements. See the NOTICE file distributed with* this work for additional information regarding copyright ownership.* The ASF licenses this file to You under the Apache license, Version 2.0* (the "License"); you may not use this file except in compliance with* the License. You may obtain a copy of the License at**      http://www.apache.org/licenses/LICENSE-2.0** Unless required by applicable law or agreed to in writing, software* distributed under the License is distributed on an "AS IS" BASIS,* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.* See the license for the specific language governing permissions and* limitations under the license.*/
package org.apache.logging.log4j.core.lookup;/*** A default lookup for others to extend.** @since 2.1*/
public abstract class AbstractLookup implements StrLookup {/*** Calls {@code lookup(null, key)} in the super class.** @see StrLookup#lookup(LogEvent, String)*/@Overridepublic String lookup(final String key) {return lookup(null, key);}}

---

●2.15.0 漏洞修复

---

Eclipse中【Maven下载时，下载源码】设定方法相关推荐

如何在eclipse中导入别人发的源码
如何在eclipse中导入别人发的源码 1.先新建一个project,如果要导入的源码是属于某个package的,那么在新的project下新建一个同名的包. 2.在package上右击选择impor ...
第一章国内下载AOSP最新源码的方法
文章目录前言一.AOSP是什么? 二.从清华大学AOSP镜像下载 1. 首先下载manifest仓库 2. 查看manifest仓库包含哪些分支 3. checkout所需的分支清单文件 4. 下 ...
mysql src.rpm_从.src.rpm包中提取出完整的源码的方法
1 什么是完整的源码就是说,最初始的源码加上打了所有的patch后的源码,即最新的源码. 2 过程 2.1 从.src.rpm中提取完整的rpm工程文件 2.1.1 rpm to cpio rpm2 ...
Eclipse中关联并调试JDK源码
eclipse关联JDK源码的一般步骤: 1.依次选择Window -> Preferences: 2.依次选择Java -> Installed JREs -> Jre- -> ...
eclipse / 绑定 OpenJDK 1.8 Java 源码的方法
Ubuntu自带的 OpenJDK 只有 JRE 环境,不提供源码,所以我们还是需要去下载. 链接: https://pan.baidu.com/s/1-JhX9MNQ5mMWLCLfIk2ODw 提 ...
maven下载不到源码：Cannot download sources Sources not found for:
记录下记录下,很神奇的问题,也不去深究了,解决就行,侧重点不在这,就把方法记录下了文章目录问题问题排查方案一 Maven的镜像换一换试一试方案二删掉工程下的缓存和IDE配置文件方案三找 ...
Maven引入依赖后自动下载并关联源码(Source)
http://justke123.iteye.com/blog/981627 好多用 Maven 的时候会遇到这样一个棘手的问题: 就是添加依赖后由于没有下载并关联源码,导致自动提示无法出现正确的方法 ...
java存入光盘_java 这是学习笔记（jdk7）书中的光盘里的源码，不知大家需要不，里面都是新手的好 Develop 238万源代码下载- www.pudn.com...
文件名称: java下载收藏√ [ 5 4 3 2 1 ] 开发工具: Java 文件大小: 1272 KB 上传时间: 2013-04-01 下载次数: 18 提供者: 孙鹏启详细 ...
maven下载，安装与eclipse中maven配置
1.maven下载.安装与环境变量配置 http://blog.csdn.net/jiuqiyuliang/article/details/45390313 2.Eclipse中maven的配置 ht ...
Linux中C语言标准库glibc源码下载
在这篇文章理清gcc.libc.glibc.libc++.libstdc++的关系,我们大概理解了libc,glibc之间的一些关系. 下面我们就开了解一些Linux中C语言标准库glibc源码. 在 ...

Eclipse中【Maven下载时，下载源码】设定方法

■Eclipse中设定方法

■效果

■扩展

●2.14.1 存在漏洞

JndiLookup.java

AbstractLookup.java

Eclipse中【Maven下载时，下载源码】设定方法相关推荐

最新文章

热门文章