0

我使用的是Jasper Server 4.5.032 位版本。

当我按照在服务器中安排报告的第一步中的要求填写报告名称后单击下一步时，它给了我以下错误：

The server has encountered an error. Please excuse the inconvenience. 
An error has occurred. Please contact your system administrator. (5321)

错误日志如下：

2012-04-09 17:37:38,940  WARN IntrusionDetector,http-8080-2:449 - [SECURITY FAILURE Anonymous:null@unknown -> /ExampleApplication/IntrusionDetector] Invalid input: context=trigger.timezone-ViewRepository_Schedule_OutputSettings_context, type(AlphaUnderscoreForward)=^[\p{L}\p{M}\p{Pc}\/]*$, input=GMT 05:30
org.owasp.esapi.errors.ValidationException: trigger.timezone-ViewRepository_Schedule_OutputSettings_context: Invalid input. Please conform to regex ^[\p{L}\p{M}\p{Pc}\/]*$ with a maximum length of 100
    at org.owasp.esapi.reference.validation.StringValidationRule.checkWhitelist(StringValidationRule.java:144)
    at org.owasp.esapi.reference.validation.StringValidationRule.checkWhitelist(StringValidationRule.java:160)
    at org.owasp.esapi.reference.validation.StringValidationRule.getValid(StringValidationRule.java:284)
    at org.owasp.esapi.reference.DefaultValidator.getValidInput(DefaultValidator.java:213)
    at com.jaspersoft.jasperserver.api.security.validators.ValidatorImpl.validate(ValidatorImpl.java:345)
    at com.jaspersoft.jasperserver.api.security.validators.ValidatorImpl.validate(ValidatorImpl.java:251)
    at com.jaspersoft.jasperserver.api.security.WebAppSecurityFilter.validate(WebAppSecurityFilter.java:175)
    at com.jaspersoft.jasperserver.api.security.WebAppSecurityFilter.doFilter(WebAppSecurityFilter.java:82)
    at org.springframework.security.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:411)
    at com.jaspersoft.jasperserver.war.MultipartRequestWrapperFilter.doFilter(MultipartRequestWrapperFilter.java:90)
    at org.springframework.security.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:411)
    at org.springframework.security.context.HttpSessionContextIntegrationFilter.doFilterHttp(HttpSessionContextIntegrationFilter.java:235)
    at org.springframework.security.ui.SpringSecurityFilter.doFilter(SpringSecurityFilter.java:53)
    at org.springframework.security.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:411)
    at org.springframework.security.util.FilterChainProxy.doFilter(FilterChainProxy.java:188)
    at org.springframework.security.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:99)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at com.jaspersoft.jasperserver.war.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:67)
    at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:236)
    at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:558)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
    at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:859)
    at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:579)
    at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:1555)
    at java.lang.Thread.run(Thread.java:619)
2012-04-09 17:37:38,972  WARN JSCommonController,http-8080-2:202 - There was a security error
4

1 回答 1

1

要禁用timezone验证，您可以在文件中注释（或删除）此字符串jasperserver\WEB-INF\classes\esapi\security.properties：

trigger.timezone=AlphaDot,AlphaUnderscoreForward,100,true,trigger.timezone-ViewRepository_Schedule_OutputSettings_context

您应该检查timezone服务器上定义的：

  • 默认时区（使用 Java 获取 - java.util.TimeZone.getDefault()）；
  • 您在beanjasperserver\WEB-INF\applicationContext.xml文件中的时区列表，属性。userTimeZonesListtimeZonesIds

表达方式

Validator.AlphaUnderscoreForward=^[\\p{L}\\p{M}\\p{Pc}\\/]*$

从jasperserver\WEB-INF\classes\esapi\validation.properties文件中只是一个用于值验证的正则表达式。

于 2012-04-10T07:38:54.380 回答