107 posts
When using the IDEA development tool, sometimes a Spring project's config files application.yml or bootstrap.yml aren't recognized properly — the icon isn't the green little leaf, causing the project to fail to start. At this point we need to manually check IDEA's configuration to fix it.
When using MyBatis, IDEA prompts 'Could not autowire. No beans of 'XXXMapper' type found.' and draws a red squiggly line on the mapper class. The actual reason is that you forgot to add the @Repository annotation to the mapper.
Every system has a login feature, and it's an indispensable battleground that developers, users, and even hackers all target first. The login logic has been discussed a lot online, but there's one pitfall beginners easily forget: the message returned in the login or forgot-password feature reveals whether an account exists.
The .iml file is IntelliJ IDEA's project configuration file, containing some configuration info about the current project. Sometimes after importing a project you'll find that the .iml file isn't generated automatically, causing the project structure to not display properly. In that case we need to generate the .iml file manually.
Fastjson has a remote code execution vulnerability; the restriction of the autotype switch can be bypassed, and a chained deserialization attacker can craft a deserialization exploit chain, ultimately achieving remote command execution. This vulnerability itself cannot bypass Fastjson's blacklist restriction; it needs to be combined with a deserialization exploit chain not on the blacklist to complete the full exploitation.
Earlier I wrote "Key-Exchange Logic for Encrypting Interface Data in Front-End/Back-End Separated Projects (RSA, AES)", explaining the encryption/decryption strategy when front and back ends exchange data. As my understanding and grasp of network programming grew, two months later I had to write another addendum to patch my previous article, because improper use still can't achieve absolute security. The previous article didn't mention the man-in-the-middle attack, so I'm adding it here.
Why can't you use double/float for transactions and financial currency in Java? In daily use, floating-point calculations with double/float often produce unexpected results, because binary can't precisely represent most decimal fractions. Today we'll discuss how to do decimal calculations correctly in Java.
This "ip.renfei.net" upgrade supports not only IPv4 networks but also IPv6 networks, so the JSON you get may be an IPv4 or an IPv6 address. Developers, please update your programs to recognize it. If you only want to query an IPv4 address, use "ipv4.renfei.net", which supports IPv4 only.
The SLF4J warning "Class path contains multiple SLF4J bindings" appears in the run log, for example after referencing sdk.renfei.net in SpringBoot. Actually this is a Jar package conflict; you just need to exclude the conflicting Jar package.
In Vue.js development you'll encounter asynchronous-call scenarios, but sometimes you need to wait for the async to finish before the next step, which is where func().then() comes in. To use this pattern you need Promise. I'm writing this article because when I searched I found some people wrote it wrong, somewhat misleading others, so I'll write my own version.
