数组上调用toString() #185

New issue

Copy link

New issue

Copy link

Closed

Closed

数组上调用toString()#185

Copy link

Labels

Bug 漏洞

Description

QiAnXinCodeSafe

opened on Dec 29, 2020

Issue body actions

直接使用method拼接，默认调用toString方法
数组类中toString进行重写，仅仅是重载为类的静态方法。所以数组直接调用toString方法的结果并不是数组中元素的值，而是[数组的类型@内存地址哈希码]
https://github.com/Tencent/APIJSON/blob/297c251f36bfacac4fb896f002f2c6a90c4cddf0/APIJSONORM/src/main/java/apijson/orm/AbstractFunctionParser.java#L170
可以手工拼接或者使用Java工具类Arrays中的toString方法转化数组为字符串。

Reacted by TommyLemon

Activity

1. TommyLemon commented on Dec 29, 2020

   

   TommyLemon

   on Dec 29, 2020

   Member

   More actions

   这里是当时写错了，感谢反馈
2. TommyLemon

   added

   Bug 漏洞

   on Jan 19, 2021
3. TommyLemon

   closed this as completedon Apr 23, 2021

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

Labels

Bug 漏洞

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions