修复XStream漏洞后扩展平台页面显示空白
1、问题描述
按照XStream升级后，兼容问题导致扩展平台页面显示空白或异常
apusic日志报错信息：
com.thoughtworks.xstream.security.ForbiddenClassException: com.kingdee.bos.webframework.management.model.WebView
2022-06-15 15:46:36 错误 [con.err-Thread 327] at com.thoughtworks.xstream.security.NoTypePermission.allows(NoTypePermission.java:26)
2022-06-15 15:46:36 错误 [con.err-Thread 327] at com.thoughtworks.xstream.mapper.SecurityMapper.realClass(SecurityMapper.java:74)
2022-06-15 15:46:36 错误 [con.err-Thread 327] at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:125)
2022-06-15 15:46:36 错误 [con.err-Thread 327] at com.thoughtworks.xstream.mapper.CachingMapper.realClass(CachingMapper.java:47)
2022-06-15 15:46:36 错误 [con.err-Thread 327] at com.thoughtworks.xstream.core.util.HierarchicalStreams.readClassType(HierarchicalStreams.java:29)
2022-06-15 15:46:36 错误 [con.err-Thread 327] at com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:135)
2022-06-15 15:46:36 错误 [con.err-Thread 327] at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32)
2、解决方案
EAS 820版本可安装补丁PT166493，EAS 850版本可安装补丁PT166376，EAS 861版本可安装补丁PT166200来解决此问题。
3、注意
安装补丁方法请参考补丁说明，并严格按照补丁说明进行补丁安装。必要时可以在测试环境下先验证通过。
修复XStream漏洞后扩展平台页面显示空白
本文2024-09-22 20:28:17发表“eas cloud知识”栏目。
本文链接：https://wenku.my7c.com/article/kingdee-eas-113838.html
