wangzaiplus / springboot Goto Github PK
View Code? Open in Web Editor NEWjava springboot redisson mybatis maven
java springboot redisson mybatis maven
MsgLog msgLog = msgLogService.selectByMsgId(msgId);
if (null == msgLog || msgLog.getStatus().equals(Constant.MsgLogStatus.CONSUMED_SUCCESS)) {// 消费幂等性
log.info("重复消费, msgId: {}", msgId);
return;
}
这里用 null == msgLog 是因为数据库中没有记录才判断为重复消费么?
mysql版本会导致主键varchar(255)报错,索引长度超出限制[Err] 1071 - Specified key was too long; max key length is 767 byte,把msg_id
的varchar长度降到113以下即可
检测到 wangzaiplus/springboot 一共引入了123个开源组件,存在83个漏洞
漏洞标题:netty 安全漏洞
缺陷组件:io.netty:[email protected]
漏洞编号:CVE-2021-37137
漏洞描述:Netty是Netty社区的一款非阻塞I/O客户端-服务器框架,它主要用于开发Java网络应用程序,如协议服务器和客户端等。
netty存在安全漏洞,该漏洞源于Snappy frame decoder函数不限制块长度,这可能会导致过度内存使用。
影响范围:(∞, 4.1.68.Final)
最小修复版本:4.1.68.Final
缺陷组件引入路径:com.wangzaiplus:[email protected]>org.redisson:[email protected]>io.netty:[email protected]
另外还有83个漏洞,详细报告:https://mofeisec.com/jr?p=af3fd0
作者,你这个项目能出个视频讲解一下么?哪怕是搞点有偿也行的,能抽时间搞个视频么,谢谢
在BaseConsumer方法中 getCorrelationId(message)为null,请问这是什么原因造成的
这个幂等实现是每次请求前先请求后台获取token,然后请求时把token带过去吗?
这样的话代码侵入性太强了吧?还是我理解错了
类名:CalculateServiceFactory.java
版本:Latest commit [73cc707] on 8 Nov 2020
行数:33-38
问题:判断中使用了相同的条件,应该更正为其他策略。
片段: } else if (Constant.CalculateTypeEnum.SUBTRACT.getType().equals(type)) {
calculateService = subtractCalculateServiceImpl;
} else if (Constant.CalculateTypeEnum.SUBTRACT.getType().equals(type)) {
calculateService = multiplyCalculateServiceImpl;
} else if (Constant.CalculateTypeEnum.SUBTRACT.getType().equals(type)) {
calculateService = divideCalculateServiceImpl;
建议把判断是否重复消费的判断和msgLog等于空的判断分开。
有时候发送消息的方法会在事务里面,这样就会导致消息监听到之后查询msgLog为null
博主你好,你在消息消费方使用了动态代理,这里是出于什么原因呢?希望探讨一下,谢谢~!
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.