在Java中安全执行复杂PowerShell命令的指南

public String disableIndexing(String driveLetter) {
    String command = "powershell.exe Get-WmiObject -Class Win32_Volume -Filter \"DriveLetter='"+driveLetter+":'\" | Set-WmiInstance -Arguments @{IndexingEnabled=$False} ";
    try {   
        Process p = Runtime.getRuntime().exec(command);
        p.waitFor();
        // ... 读取输出和错误流 ...
    } catch(Exception e) {
        e.printStackTrace();
    }
    return "Some result";
}

import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.nio.charset.StandardCharsets;
import java.util.Base64;

public class PowerShellExecutor {

    /**
     * 禁用指定驱动器的索引功能。
     *
     * @param driveLetter 驱动器字母，例如 "D"
     * @return 执行结果消息
     */
    public String disableIndexing(String driveLetter) {
        String returnVal = "";
        // 1. 构造原始的PowerShell命令
        String powerShellCommand = "Get-WmiObject -Class Win32_Volume -Filter \"DriveLetter='" + driveLetter + ":'\" | Set-WmiInstance -Arguments @{IndexingEnabled=$False}";

        // 2. 将PowerShell命令字符串按照UTF-16LE编码为字节数组
        byte[] powerShellBytes = powerShellCommand.getBytes(StandardCharsets.UTF_16LE);

        // 3. 对字节数组进行Base64编码
        String encodedCmd = Base64.getEncoder().encodeToString(powerShellBytes);

        // 4. 构造最终的执行命令，使用-EncodedCommand参数
        // 注意：这里不需要再对整个字符串进行额外的转义，因为Base64编码已经处理了特殊字符
        String command = "powershell.exe -EncodedCommand " + encodedCmd;

        System.out.println("Executing command: " + command); // 打印最终执行的命令（包含Base64编码）

        try {
            Process p = Runtime.getRuntime().exec(command);

            // 读取标准输出
            BufferedReader stdInput = new BufferedReader(new InputStreamReader(p.getInputStream()));
            String s;
            StringBuilder output = new StringBuilder();
            while ((s = stdInput.readLine()) != null) {
                output.append(s).append("\n");
            }
            System.out.println("Standard Output:\n" + output.toString());

            // 读取标准错误
            BufferedReader stdError = new BufferedReader(new InputStreamReader(p.getErrorStream()));
            StringBuilder errorOutput = new StringBuilder();
            while ((s = stdError.readLine()) != null) {
                errorOutput.append(s).append("\n");
            }
            if (errorOutput.length() > 0) {
                System.err.println("Error Output:\n" + errorOutput.toString());
            }

            // 等待进程执行完毕
            int exitCode = p.waitFor();
            System.out.println("Process exited with code: " + exitCode);

            if (exitCode == 0) {
                returnVal = "Indexing changed Successfully";
            } else {
                returnVal = "Failed to change indexing. Exit code: " + exitCode + ". Error: " + errorOutput.toString();
            }

        } catch (Exception e) {
            e.printStackTrace();
            returnVal = "An exception occurred: " + e.getMessage();
        }
        return returnVal;
    }

    public static void main(String[] args) {
        PowerShellExecutor executor = new PowerShellExecutor();
        // 尝试禁用D盘的索引
        String result = executor.disableIndexing("D"); 
        System.out.println("Operation Result: " + result);
    }
}