Browse Source

富文本被xss过滤器修改导致的问题提交

v6
蟑螂恶霸 2 years ago
parent
commit
9ea2b9d560
  1. 10
      lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/XssAndSqlFilter.java
  2. 2
      lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/XssFilter.java

10
lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/XssAndSqlFilter.java

@ -31,6 +31,16 @@ public class XssAndSqlFilter implements Filter {
XssAndSqlHttpServletRequestWrapper xssRequest = null; XssAndSqlHttpServletRequestWrapper xssRequest = null;
if (request instanceof HttpServletRequest) { if (request instanceof HttpServletRequest) {
method = ((HttpServletRequest) request).getMethod(); method = ((HttpServletRequest) request).getMethod();
// 解决不需要xss也被拦截的问题
HttpServletRequest req = (HttpServletRequest) request;
//获取请求你ip后的全部路径
String uri = req.getRequestURI();
if (uri.indexOf("/system/notice/") >= 0) {
chain.doFilter(request, response);
return;
}
//获取请求你ip后的全部路径
xssRequest = new XssAndSqlHttpServletRequestWrapper((HttpServletRequest) request); xssRequest = new XssAndSqlHttpServletRequestWrapper((HttpServletRequest) request);
} }
if ("POST".equalsIgnoreCase(method)) { if ("POST".equalsIgnoreCase(method)) {

2
lib/EmergencyService/zdxtEmergencyAuthService/src/main/java/com/zdxt/auth/framework/config/XssFilter.java

@ -16,7 +16,7 @@ public class XssFilter implements Filter {
// 忽略权限检查的url地址 // 忽略权限检查的url地址
private final String[] excludeUrls = new String[]{ private final String[] excludeUrls = new String[]{
"null" "/system/notice/"
}; };
public void doFilter(ServletRequest arg0, ServletResponse arg1, FilterChain arg2) public void doFilter(ServletRequest arg0, ServletResponse arg1, FilterChain arg2)

Loading…
Cancel
Save