请修改Shiro反序列化漏洞

[wadang]

@Bean public CookieRememberMeManager rememberMeManager(SimpleCookie rememberMeCookie) { CookieRememberMeManager manager = new CookieRememberMeManager(); manager.setCipherKey(Base64.decode("Z3VucwAAAAAAAAAAAAAAAA==")); manager.setCookie(rememberMeCookie); return manager; }
此处将秘钥硬编码进去
http://www.sohu.com/a/284726504_727010

[linruiand]

同样遇到了，感谢楼主