Skip to content

数组上调用toString() #185

Closed
Closed
数组上调用toString()#185
Labels
Bug 漏洞

Description

@QiAnXinCodeSafe
QiAnXinCodeSafe
opened on Dec 29, 2020

直接使用method拼接，默认调用toString方法
数组类中toString进行重写，仅仅是重载为类的静态方法。所以数组直接调用toString方法的结果并不是数组中元素的值，而是[数组的类型@内存地址哈希码]
https://github.com/Tencent/APIJSON/blob/297c251f36bfacac4fb896f002f2c6a90c4cddf0/APIJSONORM/src/main/java/apijson/orm/AbstractFunctionParser.java#L170
可以手工拼接或者使用Java工具类Arrays中的toString方法转化数组为字符串。

Activity

  1. TommyLemon commented on Dec 29, 2020

    @TommyLemon
    TommyLemon
    on Dec 29, 2020
    Member

    这里是当时写错了，感谢反馈

  2. TommyLemon
    added
    Bug 漏洞
    on Jan 19, 2021
  3. TommyLemon
    closed this as completedon Apr 23, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Bug 漏洞

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions