alibaba / alibaba/arthas

vmtool能实现动态删除已经注册的Filter吗

Open
#3,040 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
37.6k
Forks
7.6k
Avg merge
1d 22h
Merged PRs (30d)
4

Description

- [ ] 我已经在 [issues](https://github.com/alibaba/arthas/issues) 里搜索,没有重复的issue。

这是命令执行的结果
```
[arthas@18633]$ vmtool --action getInstances --express 'instances[0]' --className [Lorg.apache.tomcat.util.descriptor.web.FilterMap;
@FilterMap[][
@FilterMap[FilterMap[filterName=Tomcat WebSocket (JSR356) Filter, urlPattern=/*]],
@FilterMap[FilterMap[filterName=shiroFilter, urlPattern=/*]],
@FilterMap[FilterMap[filterName=requestContextFilter, urlPattern=/*]],
@FilterMap[FilterMap[filterName=formContentFilter, urlPattern=/*]],
@FilterMap[FilterMap[filterName=characterEncodingFilter, urlPattern=/*]],
@FilterMap[FilterMap[filterName=/demo222.ico, urlPattern=/demo222.ico]],
@FilterMap[FilterMap[filterName=/d22.ico, urlPattern=/d22.ico]],
@FilterMap[FilterMap[filterName=/demo.ico, urlPattern=/demo.ico]],
]
```
我应该如何删除掉后三个动态注册的恶意Filter

Contributor guide

Open the contributing guide

Research direction

Start with the vmtool --action getInstances invocation and the org.apache.tomcat.util.descriptor.web.FilterMap class shown in the report. Trace how registered filters can be inspected and determine the supported entry point for removing the three named filters dynamically; done means their registrations are gone without affecting the remaining filters.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
devtools, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.