入口增加校验

zgzt-sys-java/jeecg-module-conn/src/main/java/org/jeecg/modules/push/utils/MqttClientCallback.java

@@ -234,8 +234,13 @@ public class MqttClientCallback implements MqttCallback, MqttCallbackExtended {
         try {
             JSONObject jsonObject = JSON.parseObject(payload);
             String sign = jsonObject.getString("sign");
+            // 校验 sign 是否存在且为有效数值
+            if (sign == null || !("1".equals(sign) || "2".equals(sign))) {
+                log.warn("无效的 sign 值：{}，payload：{}", sign, payload);
+                return; // 或抛出业务异常
+            }
             // sign："1"，正常数据；sign："2"，异常数据
-            if (sign.equals("2")) {
+            if ("2".equals(sign)) {
                 BilletBasicInfo billetBasicInfo = JSON.parseObject(payload, BilletBasicInfo.class);
                 BilletBasicInfoException billetBasicInfoException = new BilletBasicInfoException();
                 BeanUtils.copyProperties(billetBasicInfo, billetBasicInfoException);