Browse Source

修复创建JS-API签名的漏洞

master
gaigeshen 8 years ago
parent
commit
ff2cd99cf4
1 changed files with 4 additions and 0 deletions
  1. +4
    -0
      weixin-java-cp/src/main/java/me/chanjar/weixin/cp/api/WxCpServiceImpl.java

+ 4
- 0
weixin-java-cp/src/main/java/me/chanjar/weixin/cp/api/WxCpServiceImpl.java View File

@@ -169,6 +169,10 @@ public class WxCpServiceImpl implements WxCpService {
jsapiSignature.setNoncestr(noncestr);
jsapiSignature.setUrl(url);
jsapiSignature.setSignature(signature);
// Fixed bug
jsapiSignature.setAppid(this.wxCpConfigStorage.getCorpId());
return jsapiSignature;
} catch (NoSuchAlgorithmException e) {
throw new RuntimeException(e);


Loading…
Cancel
Save