Question

我正在使用Jasper Server 4.5.0 32位版本。

当我在服务器中安排报告的第一步中填写报告名称后单击“下一步”时，它会出现以下错误：

The server has encountered an error. Please excuse the inconvenience. 
An error has occurred. Please contact your system administrator. (5321)

以下错误日志：

2012-04-09 17:37:38,940  WARN IntrusionDetector,http-8080-2:449 - [SECURITY FAILURE Anonymous:null@unknown -> /ExampleApplication/IntrusionDetector] Invalid input: context=trigger.timezone-ViewRepository_Schedule_OutputSettings_context, type(AlphaUnderscoreForward)=^[\p{L}\p{M}\p{Pc}\/]*$, input=GMT 05:30
org.owasp.esapi.errors.ValidationException: trigger.timezone-ViewRepository_Schedule_OutputSettings_context: Invalid input. Please conform to regex ^[\p{L}\p{M}\p{Pc}\/]*$ with a maximum length of 100
    at org.owasp.esapi.reference.validation.StringValidationRule.checkWhitelist(StringValidationRule.java:144)
    at org.owasp.esapi.reference.validation.StringValidationRule.checkWhitelist(StringValidationRule.java:160)
    at org.owasp.esapi.reference.validation.StringValidationRule.getValid(StringValidationRule.java:284)
    at org.owasp.esapi.reference.DefaultValidator.getValidInput(DefaultValidator.java:213)
    at com.jaspersoft.jasperserver.api.security.validators.ValidatorImpl.validate(ValidatorImpl.java:345)
    at com.jaspersoft.jasperserver.api.security.validators.ValidatorImpl.validate(ValidatorImpl.java:251)
    at com.jaspersoft.jasperserver.api.security.WebAppSecurityFilter.validate(WebAppSecurityFilter.java:175)
    at com.jaspersoft.jasperserver.api.security.WebAppSecurityFilter.doFilter(WebAppSecurityFilter.java:82)
    at org.springframework.security.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:411)
    at com.jaspersoft.jasperserver.war.MultipartRequestWrapperFilter.doFilter(MultipartRequestWrapperFilter.java:90)
    at org.springframework.security.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:411)
    at org.springframework.security.context.HttpSessionContextIntegrationFilter.doFilterHttp(HttpSessionContextIntegrationFilter.java:235)
    at org.springframework.security.ui.SpringSecurityFilter.doFilter(SpringSecurityFilter.java:53)
    at org.springframework.security.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:411)
    at org.springframework.security.util.FilterChainProxy.doFilter(FilterChainProxy.java:188)
    at org.springframework.security.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:99)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at com.jaspersoft.jasperserver.war.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:67)
    at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:236)
    at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:558)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
    at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:859)
    at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:579)
    at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:1555)
    at java.lang.Thread.run(Thread.java:619)
2012-04-09 17:37:38,972  WARN JSCommonController,http-8080-2:202 - There was a security error

Answer 1

要停用timezone验证，您可以在 jasperserver\WEB-INF\classes\esapi\security.properties 文件中评论（或删除）此字符串：

trigger.timezone=AlphaDot,AlphaUnderscoreForward,100,true,trigger.timezone-ViewRepository_Schedule_OutputSettings_context

您应该检查服务器上定义的timezone：

默认时区（使用Java获取 - java.util.TimeZone.getDefault()）;
您在jasperserver\WEB-INF\applicationContext.xml bean userTimeZonesList属性的 timeZonesIds 文件中包含时区的列表。

表达式

Validator.AlphaUnderscoreForward=^[\\p{L}\\p{M}\\p{Pc}\\/]*$

来自 jasperserver\WEB-INF\classes\esapi\validation.properties 文件的

只是值验证的正则表达式。

无法进入Jasper Server的第二步调度

1 个答案: