diff --git a/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/XssAndSqlFilter.java b/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/XssAndSqlFilter.java index 773b54c0..1bbf8bcd 100644 --- a/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/XssAndSqlFilter.java +++ b/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/XssAndSqlFilter.java @@ -31,6 +31,16 @@ public class XssAndSqlFilter implements Filter { XssAndSqlHttpServletRequestWrapper xssRequest = null; if (request instanceof HttpServletRequest) { method = ((HttpServletRequest) request).getMethod(); + + // 解决不需要xss也被拦截的问题 + HttpServletRequest req = (HttpServletRequest) request; + //获取请求你ip后的全部路径 + String uri = req.getRequestURI(); + if (uri.indexOf("/system/notice/") >= 0) { + chain.doFilter(request, response); + return; + } + //获取请求你ip后的全部路径 xssRequest = new XssAndSqlHttpServletRequestWrapper((HttpServletRequest) request); } if ("POST".equalsIgnoreCase(method)) { diff --git a/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/XssFilter.java b/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/XssFilter.java index 899ef091..00bcc047 100644 --- a/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/XssFilter.java +++ b/lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/XssFilter.java @@ -16,7 +16,7 @@ public class XssFilter implements Filter { // 忽略权限检查的url地址 private final String[] excludeUrls = new String[]{ - "null" + "/system/notice/" }; public void doFilter(ServletRequest arg0, ServletResponse arg1, FilterChain arg2)