vmtool能实现动态删除已经注册的Filter吗
- Dominant language
- Java
- Stars
- 37.6k
- Forks
- 7.6k
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 4
Description
- [ ] 我已经在 [issues](https://github.com/alibaba/arthas/issues) 里搜索,没有重复的issue。
这是命令执行的结果
```
[arthas@18633]$ vmtool --action getInstances --express 'instances[0]' --className [Lorg.apache.tomcat.util.descriptor.web.FilterMap;
@FilterMap[][
@FilterMap[FilterMap[filterName=Tomcat WebSocket (JSR356) Filter, urlPattern=/*]],
@FilterMap[FilterMap[filterName=shiroFilter, urlPattern=/*]],
@FilterMap[FilterMap[filterName=requestContextFilter, urlPattern=/*]],
@FilterMap[FilterMap[filterName=formContentFilter, urlPattern=/*]],
@FilterMap[FilterMap[filterName=characterEncodingFilter, urlPattern=/*]],
@FilterMap[FilterMap[filterName=/demo222.ico, urlPattern=/demo222.ico]],
@FilterMap[FilterMap[filterName=/d22.ico, urlPattern=/d22.ico]],
@FilterMap[FilterMap[filterName=/demo.ico, urlPattern=/demo.ico]],
]
```
我应该如何删除掉后三个动态注册的恶意Filter
Contributor guide
Research direction
Start with the vmtool --action getInstances invocation and the org.apache.tomcat.util.descriptor.web.FilterMap class shown in the report. Trace how registered filters can be inspected and determine the supported entry point for removing the three named filters dynamically; done means their registrations are gone without affecting the remaining filters.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- devtools, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100