xinyin025/RuoYi-Vue-Plus
1
0
Fork 0
mirror of https://github.com/dromara/RuoYi-Vue-Plus.git synced 2025-10-14 22:13:43 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

update 优化魔法值

Browse Source
This commit is contained in:
zendwang
2022-07-04 13:06:18 +08:00
parent 686068c8ed
commit 765deae84d
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ruoyi-common/src/main/java/com/ruoyi/common/filter/XssFilter.java
View File

@@ -1,6 +1,7 @@
package com.ruoyi.common.filter;
import cn.hutool.extra.servlet.ServletUtil;
import com.ruoyi.common.enums.HttpMethod;
import com.ruoyi.common.utils.StringUtils;
import javax.servlet.*;
@@ -49,7 +50,7 @@ public class XssFilter implements Filter {
String url = request.getServletPath();
String method = request.getMethod();
// GET DELETE 不过滤
if (method == null || method.matches(ServletUtil.METHOD_GET) || method.matches(ServletUtil.METHOD_DELETE)) {
if (method == null || method.matches(HttpMethod.GET.name()) || method.matches(HttpMethod.DELETE.name())) {
return true;
}
return StringUtils.matches(url, excludes);