处理相关的安全权限问题以及图片导出乱码问题

modules/flowable-rest/src/main/java/org/flowable/rest/service/api/runtime/process/ProcessInstanceDiagramResource.java

@@ -70,8 +70,8 @@ public class ProcessInstanceDiagramResource extends BaseProcessInstanceResource
             BpmnModel bpmnModel = repositoryService.getBpmnModel(pde.getId());
             ProcessDiagramGenerator diagramGenerator = processEngineConfiguration.getProcessDiagramGenerator();
             InputStream resource = diagramGenerator.generateDiagram(bpmnModel, "png", runtimeService.getActiveActivityIds(processInstance.getId()), Collections.emptyList(),
-                    processEngineConfiguration.getActivityFontName(), processEngineConfiguration.getLabelFontName(),
-                    processEngineConfiguration.getAnnotationFontName(), processEngineConfiguration.getClassLoader(), 1.0,processEngineConfiguration.isDrawSequenceFlowNameWithNoLabelDI());
+                    "宋体", "宋体",
+                    "宋体", processEngineConfiguration.getClassLoader(), 1.0,processEngineConfiguration.isDrawSequenceFlowNameWithNoLabelDI());
 
             HttpHeaders responseHeaders = new HttpHeaders();
             responseHeaders.set("Content-Type", "image/png");

modules/flowable-ui/flowable-ui-common/src/main/java/org/flowable/ui/common/security/CustomPersistentRememberMeServices.java

@@ -212,7 +212,7 @@ public class CustomPersistentRememberMeServices extends AbstractRememberMeServic
 
         Method setHttpOnlyMethod = ReflectionUtils.findMethod(Cookie.class, "setHttpOnly", boolean.class);
         if (setHttpOnlyMethod != null) {
-            ReflectionUtils.invokeMethod(setHttpOnlyMethod, cookie, Boolean.TRUE);
+            ReflectionUtils.invokeMethod(setHttpOnlyMethod, cookie, Boolean.FALSE);
         } else if (logger.isDebugEnabled()) {
             logger.debug("Note: Cookie will not be marked as HttpOnly because you are not using Servlet 3.0 (Cookie#setHttpOnly(boolean) was not found).");
         }