框架完善
This commit is contained in:
+6
-3
@@ -14,6 +14,7 @@ import java.io.PrintWriter;
|
|||||||
import java.text.SimpleDateFormat;
|
import java.text.SimpleDateFormat;
|
||||||
import java.util.Date;
|
import java.util.Date;
|
||||||
import java.util.List;
|
import java.util.List;
|
||||||
|
import java.util.Objects;
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* 描述:跨站过滤器
|
* 描述:跨站过滤器
|
||||||
@@ -49,13 +50,15 @@ public class CsrfFilter implements Filter {
|
|||||||
throws IOException, ServletException {
|
throws IOException, ServletException {
|
||||||
HttpServletRequest req = (HttpServletRequest) request;
|
HttpServletRequest req = (HttpServletRequest) request;
|
||||||
HttpServletResponse res = (HttpServletResponse) response;
|
HttpServletResponse res = (HttpServletResponse) response;
|
||||||
// 获取请求url地址
|
// 获取是否为websocket链接
|
||||||
String url = req.getRequestURL().toString();
|
String upgrade = req.getHeader("Upgrade");
|
||||||
// 获取来源
|
// 获取来源
|
||||||
String referurl = req.getHeader("Referer");
|
String referurl = req.getHeader("Referer");
|
||||||
if(isWhiteReq(referurl)){
|
if(isWhiteReq(referurl) || Objects.equals(upgrade,"websocket")){
|
||||||
chain.doFilter(request, response);
|
chain.doFilter(request, response);
|
||||||
}else{
|
}else{
|
||||||
|
// 获取请求url地址
|
||||||
|
String url = req.getRequestURL().toString();
|
||||||
String log = "";
|
String log = "";
|
||||||
String date = new SimpleDateFormat("yyyyMMddHHmmss").format(new Date());
|
String date = new SimpleDateFormat("yyyyMMddHHmmss").format(new Date());
|
||||||
String ip = getIp(req);
|
String ip = getIp(req);
|
||||||
|
|||||||
Reference in New Issue
Block a user