Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: binarywang/WxJava
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: develop
Choose a base ref
...
head repository: binarywang/WxJava
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: devin/1785469108-security-tls-and-random
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 3 commits
  • 8 files changed
  • 2 contributors

Commits on Jul 31, 2026

  1. fix(security): 默认校验服务器证书并使用安全随机数 

    - DefaultApacheHttpClientBuilder / DefaultHttpComponentsClientBuilder 默认不再信任所有证书，
  hc5 实现同时改用 DefaultHostnameVerifier，新增 skipServerCertificateVerification 开关供调试场景使用
- WxCryptUtil、RandomUtils、wxpay v3 SignUtils 改用 SecureRandom 生成随机串/nonce
- WxCryptUtil 回调签名比较改为 MessageDigest.isEqual，避免时序攻击

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    @binarywang @devin-ai-integration
    binarywang and devin-ai-integration[bot] committed Jul 31, 2026
    Configuration menu
    Copy the full SHA
    ec981e9 View commit details
    Browse the repository at this point in the history

  2. fix(security): 证书校验开关接入连接池并补充真实TLS行为测试 

    Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    @binarywang @devin-ai-integration
    binarywang and devin-ai-integration[bot] committed Jul 31, 2026
    Configuration menu
    Copy the full SHA
    3da9f64 View commit details
    Browse the repository at this point in the history

  3. chore(test): 移除 testng.xml 中已不存在的 WxErrorTest 登记 

    Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    @binarywang @devin-ai-integration
    binarywang and devin-ai-integration[bot] committed Jul 31, 2026
    Configuration menu
    Copy the full SHA
    4b77d10 View commit details
    Browse the repository at this point in the history
Loading