From a247d154203ce3c3edc082eb21f9182414f6ff70 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=A2=81=E7=90=A6=E6=B6=9B?= Date: Wed, 12 Apr 2023 15:58:11 +0800 Subject: [PATCH] =?UTF-8?q?=E6=A1=86=E6=9E=B6=E5=AE=8C=E5=96=84?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../java/com/jero/config/filter/csrf/CsrfFilter.java | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/jero-boot/jero-boot-base/jero-boot-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java b/jero-boot/jero-boot-base/jero-boot-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java index b4a11611..e3fdc19e 100644 --- a/jero-boot/jero-boot-base/jero-boot-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java +++ b/jero-boot/jero-boot-base/jero-boot-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java @@ -14,6 +14,7 @@ import java.io.PrintWriter; import java.text.SimpleDateFormat; import java.util.Date; import java.util.List; +import java.util.Objects; /** * 描述:跨站过滤器 @@ -49,13 +50,15 @@ public class CsrfFilter implements Filter { throws IOException, ServletException { HttpServletRequest req = (HttpServletRequest) request; HttpServletResponse res = (HttpServletResponse) response; - // 获取请求url地址 - String url = req.getRequestURL().toString(); + // 获取是否为websocket链接 + String upgrade = req.getHeader("Upgrade"); // 获取来源 String referurl = req.getHeader("Referer"); - if(isWhiteReq(referurl)){ + if(isWhiteReq(referurl) || Objects.equals(upgrade,"websocket")){ chain.doFilter(request, response); }else{ + // 获取请求url地址 + String url = req.getRequestURL().toString(); String log = ""; String date = new SimpleDateFormat("yyyyMMddHHmmss").format(new Date()); String ip = getIp(req);