diff --git a/WebContent/jsp/bap/admin/common/serverManDetail.jsp b/WebContent/jsp/bap/admin/common/serverManDetail.jsp index 7379911..3b0f8b2 100644 --- a/WebContent/jsp/bap/admin/common/serverManDetail.jsp +++ b/WebContent/jsp/bap/admin/common/serverManDetail.jsp @@ -24,7 +24,6 @@ function init(url){ dataType:"json", data:{cmd: 'LIST_INIT_COMBO'}, success:function(json){ - debugger; //new makeOptions("CODE","NAME").setObj($("select[name=flovrSevrName]")).setNoValueInclude(true).setNoValue(' ','전체').setData(json.serverRows).rendering(); new makeOptions("CODE","NAME").setObj($("select[name=flovrSevrName]")).setData(json.serverRows).rendering(); detail(url); diff --git a/WebContent/jsp/bap/admin/common/sysinfoManDetail.jsp b/WebContent/jsp/bap/admin/common/sysinfoManDetail.jsp index 3072f35..1d28265 100644 --- a/WebContent/jsp/bap/admin/common/sysinfoManDetail.jsp +++ b/WebContent/jsp/bap/admin/common/sysinfoManDetail.jsp @@ -35,7 +35,6 @@ success : function(json) { var data = json; var detail = json.detail; - debugger; // $("select[name=workGrpCd]").attr("disabled",true); // $("select[name=sndRcvKind]").attr("disabled",true); // $("select[name=adptrKind]").attr("disabled",true); diff --git a/WebContent/jsp/bap/admin/schedule/holidayManDetail.jsp b/WebContent/jsp/bap/admin/schedule/holidayManDetail.jsp index f574beb..2d21504 100644 --- a/WebContent/jsp/bap/admin/schedule/holidayManDetail.jsp +++ b/WebContent/jsp/bap/admin/schedule/holidayManDetail.jsp @@ -44,7 +44,6 @@ $(document).ready(function() { var holdyYmd ="${param.holdyYmd}"; var holdyDstcd ="${param.holdyDstcd}"; var evntSchdrHoldyCtnt ="${param.evntSchdrHoldyCtnt}"; - debugger; if (holdyYmd != "" && holdyYmd !="null"){ isDetail = true; } diff --git a/kjb-docs/vulnerability/vulnerability-2.odt b/kjb-docs/vulnerability/vulnerability-2.odt new file mode 100644 index 0000000..f46ffda Binary files /dev/null and b/kjb-docs/vulnerability/vulnerability-2.odt differ diff --git a/src/main/java/com/eactive/eai/rms/common/exception/GlobalExceptionController.java b/src/main/java/com/eactive/eai/rms/common/exception/GlobalExceptionController.java index e0fd72b..3e39210 100644 --- a/src/main/java/com/eactive/eai/rms/common/exception/GlobalExceptionController.java +++ b/src/main/java/com/eactive/eai/rms/common/exception/GlobalExceptionController.java @@ -10,6 +10,7 @@ import javax.servlet.http.HttpServletResponse; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.springframework.dao.DataAccessException; +import org.springframework.dao.DataIntegrityViolationException; import org.springframework.dao.DuplicateKeyException; import org.springframework.web.bind.annotation.ControllerAdvice; import org.springframework.web.bind.annotation.ExceptionHandler; @@ -33,6 +34,16 @@ public class GlobalExceptionController { .map(SQLException::getMessage) .orElse(""); errMsg = errMsg + "중복 KEY 에러발생.\n자세한 사항은 관리자에게 문의바랍니다. "; + } else if (e instanceof DataIntegrityViolationException) { + errMsg = "입력값이 올바르지 않습니다. 필수 항목을 확인해주세요."; + } else if (e instanceof DataAccessException) { + errMsg = "데이터베이스 처리 중 오류가 발생했습니다."; + } else if (e instanceof SQLException) { + errMsg = "데이터베이스 처리 중 오류가 발생했습니다."; + } + + if (errMsg != null && (errMsg.contains("NestedSQLException") || errMsg.contains("nested exception"))) { + errMsg = "데이터베이스 처리 중 오류가 발생했습니다."; } if (request.getServletPath().endsWith(".json")) { @@ -46,20 +57,21 @@ public class GlobalExceptionController { } } - @ExceptionHandler(RuntimeException.class) - public ModelAndView handleBizException(Exception e, HttpServletRequest request, HttpServletResponse response) { - logger.error("GlobalExceptionController] handleBizException ", e); - response.setStatus(HttpServletResponse.SC_BAD_REQUEST); - - if (request.getServletPath().endsWith(".json")) { - HashMap resultMap = new HashMap(); - resultMap.put("status", "fail"); - resultMap.put("errorMsg", e.getMessage()); - ModelAndView modelAndView = new ModelAndView("jsonView", resultMap); - return modelAndView; - } else { - return null; - } - } + // 26.02.10 - 웹취약점 관련(시스템 운영정보 노출, Exception 과 보다 먼저 처리되어 필요성이 없는듯하여 주석으로 삭제 처리 +// @ExceptionHandler(RuntimeException.class) +// public ModelAndView handleBizException(Exception e, HttpServletRequest request, HttpServletResponse response) { +// logger.error("GlobalExceptionController] handleBizException ", e); +// response.setStatus(HttpServletResponse.SC_BAD_REQUEST); +// +// if (request.getServletPath().endsWith(".json")) { +// HashMap resultMap = new HashMap(); +// resultMap.put("status", "fail"); +// resultMap.put("errorMsg", e.getMessage()); +// ModelAndView modelAndView = new ModelAndView("jsonView", resultMap); +// return modelAndView; +// } else { +// return null; +// } +// } } \ No newline at end of file