提交vue漏洞扫描修复

src/api/Home.js

@@ -2,7 +2,7 @@ import { _get, _post,_form } from "../http/index";
 export const  getCarousel = "/getCarousel"
 export const  boutiqueGoods = "/boutiqueGoods"
 export const  recommendGoods = "/recommendGoods"
-export const userLogin = (params, success, error)  => _form("/appLogin", params, success, error);
+export const userLogin = (params, success, error)  => _post("/appLogin", params, success, error);
 
 //查询字典
 export const getDict = (params, success, error) => _get("/app/queryDict",params,success,error);

src/common/globalRequest.js

@@ -1,6 +1,6 @@
 import axios from "axios";
 import jsonp from "jsonp";
-axios.defaults.withCredentials = true;
+// axios.defaults.withCredentials = true;
 
 const $globalRequestUrl = (params) => {
 	const { VITE_BASE_URL } = import.meta.env;

src/components/footer-enforcement-nav/index.vue

@@ -28,7 +28,7 @@
 
 <script setup name="footerNav">
 
-const { useCommon } = $globalStore
+// const { useCommon } = $globalStore
 
 let data = reactive({
 	footerActive: "Home",
@@ -42,9 +42,6 @@ const active = ref(0);
 
     };
 
-const goodsNum = computed(() => {
-	return useCommon.goods_card_num;
-});
 </script>
 <style lang="less" scoped>
 	.footer_nav{

src/components/footer-nav/index.vue

@@ -16,16 +16,13 @@
 
 <script setup name="footerNav">
 
-const { useCommon } = $globalStore
+// const { useCommon } = $globalStore
 
 let data = reactive({
 	footerActive: "Home",
 	dot: false,
 });
 
-const goodsNum = computed(() => {
-	return useCommon.goods_card_num;
-});
 </script>
 <style lang="less" scoped>
 	.footer_nav{

src/http/http.js

@@ -2,13 +2,10 @@ import axios from 'axios';
 import { $globalStore } from "../common/globalStore"
 // import router from '@/router/home';
 // import {cache} from '@/store/store';
-axios.defaults.withCredentials = true
-const source = axios.CancelToken.source()
 const http =   axios.create({
     traditional: true,
     contentType : "application/json",
     timeout: 1000 * 1000, // 1 秒
-    cancelToken: source.token // 将cancel token添加到option请求中
 });
 const router = useRouter();
 //请求拦截器添加head

src/http/index.js

@@ -1,5 +1,6 @@
 import http from "./http";
 import { baseUrl } from "../config/env";
+
 // import qs from "qs";
 // import {cache} from '@/store/store';
 // 通用公用方法
@@ -33,7 +34,7 @@ function request(type, url, params, success, error) {
   let config = {
     method: type,
     url: baseUrl + url,
-    data: params
+    data: params,
   };
   if (type == "GET") {
     config.params = params;
@@ -45,6 +46,7 @@ function request(type, url, params, success, error) {
     config.headers = { "Content-Type": "application/x-www-form-urlencoded" };
     // config.data = qs.stringify(params);
   }
+
   return new Promise((resolve, reject) => {
     http
       .request(config)

src/router/home.js

@@ -4,16 +4,18 @@ const routes = [
 	{
 		path: "/login",
 		name: "login",
-		component: login,
+		component: () => import("@/views/login.vue"),
-		meta: {},
+		meta: {
+      isKeepAlive: false,
+    },
 	},
   //企业端首页
   {
 		path: "/home",
 		name: "Home",
-		component: Home,
+		component:() => import("@/views/Home.vue"),
 		meta: {
-			isKeepAlive: true,
+			isKeepAlive: false,
 		},
 	},
 	{
@@ -21,7 +23,7 @@ const routes = [
 		name: "goodsDetail",
 		component: () => import("@/views/common/goodsDetail.vue"),
 		meta: {
-			isRouterKeepAlive: true,
+			isRouterKeepAlive: false,
 		},
 	},
   // 企业信息登记

src/views/Home.vue

@@ -126,7 +126,7 @@ const onLoad = () => {
 const generateRandomNumber =() =>{
       const min = 100000;
       const max = 999999;
-      const randomNum = Math.floor(Math.random() * (max - min + 1)) + min;
+      const randomNum = (Math.floor(Math.random() * (max - min + 1)) + min);
       return randomNum.toString().padStart(6, '0');
 }
 onMounted(() => {
@@ -136,7 +136,8 @@ onMounted(() => {
 
   const access_key = '6374106c5eb449a4ad6c2430f30796e6';
   const access_secret = '434fec85aa5846e88bbeb8fac6cf6d7f';
-  const nonce = generateRandomNumber();
+  // generateRandomNumber()
+  const nonce = generateRandomNumber;
   const timestamp = `${Date.now()}`;
 
   const str = [access_secret, nonce, timestamp]
@@ -163,30 +164,30 @@ onMounted(() => {
     console.log("鉴权",err);
   });
 
-  w6s.ready(() => {
+//   w6s.ready(() => {
-    w6s.szient.getAuthCode({
+//     w6s.szient.getAuthCode({
-      success: function(res) {
+//       success: function(res) {
-        console.log(res)
+//         console.log(res)
-        console.log("认证",res);
+//         console.log("认证",res);
-        console.log(res.result.result.code)
+//         console.log(res.result.result.code)
-        getSiqLoginAuth({code: res.result.result.code},success =>{
+//         getSiqLoginAuth({code: res.result.result.code},success =>{
-          console.log(success.data)
+//           console.log(success.data)
-        },error =>{
+//         },error =>{
 
-        })
+//         })
-      },
+//       },
-      fail: function(err) {
+//       fail: function(err) {
-        console.log(err)
+//         console.log(err)
-        console.log("认证",err);
+//         console.log("认证",err);
-      },
+//       },
-  });
+//   });
-});
+// });
 
-  getSiqLoginAuth({code:""},success =>{
+  // getSiqLoginAuth({code:""},success =>{
-      console.log(success.data)
+  //     console.log(success.data)
-  },error =>{
+  // },error =>{
 
-  })
+  // })
   // getEnterpriseMerchantAuthorization({merchantTel: useCommon.phonenumber},success =>{
   //       if(!(success.data == null && success.data.length == 0)){
   //         useCommon.SET_USER_ENTERPRISE_NUMBER(success.data[0].enterpriseNumber);

src/views/administrative/appointmentList.vue

@@ -225,7 +225,10 @@
 
 	const goAdd = () => {
 		router.push({
-			path: "/appointment"
+			path: "/appointment",
+			// query: {
+			// 	enterpriseNumber: "123",
+			// }
 		});
 	}
 
@@ -472,3 +475,4 @@ const formattedTime = (dateTime) =>{
   text-overflow: ellipsis;
 }
 </style>
+

src/views/enforce/scanPageTest.vue

@@ -11,15 +11,13 @@
       <div v-if="!cameraReady">
         loading...
       </div>
-
-
     </qrcode-stream>
     <!-- <audio ref="audioRef" src="/src/assets/Di.mp3"></audio> -->
   </div>
 </template>
 
 <script setup lang="ts">
-import Vconsole from "vconsole";
+// import Vconsole from "vconsole";
 import { QrcodeStream } from "vue-qrcode-reader";
 import {ref} from 'vue'
 const audioRef = ref(null);
@@ -29,7 +27,7 @@ const scanPause = ref(false);
 const reactAngles = ref<any>([]);
 const onCameraOn = function () {
   cameraReady.value = true;
-  new Vconsole();
+  // new Vconsole();
 }
 const handleError =  function (err) {
     errorInfo.value = `[${err.name}]: `
@@ -53,9 +51,6 @@ const handleError =  function (err) {
   console.log(errorInfo.value);
   errorInfo.value = '';
 }
-const created = () =>{
-  new Vconsole();
-}
 
 const paintOutLineAndCenterText = (detectedCodes, ctx) => {
   // 暂停页面

src/views/login.vue

@@ -9,9 +9,9 @@
 				</template>
 			</van-nav-bar>
 			<van-form @submit="onSubmit">
-				<van-field v-model="loginParam.username" name="username"  label="用户名" placeholder="用户名"
+				<van-field v-model="loginParam.secretName" name="secretName"  label="用户名" placeholder="用户名"
 					:rules="[{ required: true, message: '请填写用户名' }]" />
-				<van-field v-model="loginParam.password" type="password" name="password" label="密码" placeholder="密码"
+				<van-field v-model="loginParam.secretKey" type="password" name="secretKey" label="密码" placeholder="密码"
 					:rules="[{ required: true, message: '请填写密码' }]" />
 				<div style="margin: 16px">
 					<van-button block type="primary" native-type="submit">登录</van-button>
@@ -28,8 +28,8 @@ import CryptoJS from "crypto-js";
 const { useCommon } = $globalStore;
 const router = useRouter();
 const loginParam = reactive({
-  username:"",
+  secretName:"",
-  password:""
+  secretKey:""
 })
 const userLoginParam = {};
 userLoginParam.username = loginParam.username;
@@ -38,15 +38,16 @@ const onSubmit = async (values) => {
   console.log(values);
 	// await getGoodsnum();
 	// await getLang();
-  values.secretKey = Encrypt(values.password);
+  // values.secretName = values.name;
+  values.secretKey = Encrypt(values.secretKey);
   // return;
   userLogin(values,success=>{
     console.log(success);
-        router.push({ name: "Home" });
+        // router.push({ name: "Home" });
-        // router.push({ name: "enforceHome" });
+        router.push({ name: "enforceHome" });
         //设置全局变量
-        useCommon.SET_USER_PHONENUMBER(success.data.phonenumber);
+        // useCommon.SET_USER_PHONENUMBER(success.data.phonenumber.toString());
-        useCommon.SET_USER_ID(success.data.userId);
+        // useCommon.SET_USER_ID(success.data.userId);
         useCommon.SET_TOKEN(success.data.token);
         // 监听uni-app发送的消息
         window.addEventListener('message', (event) => {