修复commons-collections引起的反序列化漏洞

hh44h1144

2021-03-12 c0f1569ad98aa44bd4ee2712ff1f3de974a28091

 ruoyi-admin/src/main/java/com/ruoyi/web/controller/monitor/SysUserOnlineController.java

@@ -82,7 +82,7 @@
     * 强退用户

     */

    @PreAuthorize("@ss.hasPermi('monitor:online:forceLogout')")

    @Log(title = "在线用户", businessType = BusinessType.DELETE)

    @Log(title = "在线用户", businessType = BusinessType.FORCE)

    @DeleteMapping("/{tokenId}")

    public AjaxResult forceLogout(@PathVariable String tokenId)

    {