cos-java-sdk-v5

cos-java-sdk-v5 copied to clipboard

CVE-2021-46877(7.5), CVE-2020-36518(7.5), CVE-2022-42003(7.5), CVE-2022-42004(7.5)

CalvinKirs

Key 包含空格导致GenerateDocPreviewUrl 出现SignatureDoesNotMatch

1

SDK语言: Java SDK SDK版本号: 5.6.167 Key 包含空格导致GenerateDocPreviewUrl 出现SignatureDoesNotMatch   DocHtmlRequest 中的key 如果包含空格这句代码会报错：URIBuilder uriBuilder = new URIBuilder(urlStr)。 将空格替换为 “%20”，又会导致SignatureDoesNotMatch：因为 buildAuthorizationStr 函数接收的key的空格被替换为“%20”了。

aishang1993

升级 bcprov 版本

1

https://github.com/tencentyun/cos-java-sdk-v5/issues/103

leshalv

在测试TCE下kms托管的客户端加密功能时，发现sdk没有指定kms服务器的endpoint的配置接口，而是固定了公有云kms服务器地址。因此增加一个构造函数，可以配置kms服务器地址。 使用方法示例： ```java { String kmsEndPoint = ""; HttpProfile httpProfile = new HttpProfile(); httpProfile.setEndpoint(kmsEndPoint); httpProfile.setProtocol(HttpProfile.REQ_HTTP); ClientProfile clientProfile = new ClientProfile(); clientProfile.setHttpProfile(httpProfile); COSEncryptionClient cosEncryptionClient = new COSEncryptionClient(new COSStaticCredentialsProvider(cred), new KMSEncryptionMaterialsProvider(encryptionMaterials), clientConfig,...

sinjoywong

ahuazhu

exception_support_return_header 1. use for like append when the position error， return the true position，but the response do not contain the infomation

owen200008

support errorhandle self define

2

support errorhandle self define

owen200008

 [https://mvnrepository.com/artifact/com.qcloud/cos_api/5.6.219.1](https://mvnrepository.com/artifact/com.qcloud/cos_api/5.6.219.1)

sagaxu

Aiurvie

flyueliu