byd扫描漏洞。

byd-structuredplugins-serve/laws-modules/src/main/java/com/jero/modules/split/service/impl/FileSpiltService.java

@@ -114,6 +114,8 @@ public class FileSpiltService {
 
     @Value("${mathToImg.url}")
     private String mathToImgUrl;
+    @Value("${mathToImg.requestKey}")
+    private String mathToImgRequestKey;
 
     /**
      * 比亚迪-下载文件url
@@ -1467,6 +1469,7 @@ public class FileSpiltService {
             String encode = this.encode(xmlStr);
             JSONObject requestParam = new JSONObject();
             requestParam.put("encode",encode);
+            requestParam.put("requestKey",mathToImgRequestKey);
             // 创建请求体并添加数据
             StringEntity requestEntity = new StringEntity(requestParam.toString(),"UTF-8");
             // 此处相当于在header里头添加content-type等参数
@@ -1477,7 +1480,7 @@ public class FileSpiltService {
             HttpResponse res = client.execute(post);
             String results = EntityUtils.toString(res.getEntity());
 
-            if (StringUtils.isNotEmpty(results)) {
+            if (StringUtils.isNotEmpty(results) && !StringUtils.equals(results,"非法请求！") && !StringUtils.equals(results,"非法参数！")) {
                 result = new File(results);
             }
         } catch (Exception e) {

byd-structuredplugins-serve/laws-modules/src/main/java/com/jero/modules/tag/controller/LawsTagController.java

@@ -52,8 +52,6 @@ public class LawsTagController extends JeroController<LawsTag, ILawsTagService>
 	private ILawsTagService lawsTagService;
 	@Resource
 	private SysDictMapper dictMapper;
-	//@Autowired
-	//private OnlCgformApiController onlCgformApiController;
 	/**
 	 * 分页列表查询
 	 *