ci: 放开onlyOffice refer拦截
This commit is contained in:
@@ -56,7 +56,10 @@ public class CsrfFilter implements Filter {
|
||||
String url = req.getRequestURL().toString();
|
||||
// 获取来源
|
||||
String referurl = req.getHeader("Referer");
|
||||
if(isWhiteReq(referurl) || Objects.equals(upgrade,"websocket") || url.contains("view") || url.contains("doc.html")){
|
||||
if(isWhiteReq(referurl) || Objects.equals(upgrade,"websocket")
|
||||
|| url.contains("view")
|
||||
|| url.contains("doc.html")
|
||||
|| url.contains("onlyOffice") ){
|
||||
chain.doFilter(request, response);
|
||||
}else{
|
||||
String log = "";
|
||||
|
||||
@@ -144,6 +144,7 @@ public class ShiroConfig {
|
||||
|
||||
//onlyoffice排除
|
||||
filterChainDefinitionMap.put("/onlyOffice/**", "anon");
|
||||
filterChainDefinitionMap.put("/onlyoffice/**", "anon");
|
||||
filterChainDefinitionMap.put("/file/**", "anon");
|
||||
|
||||
//对接接口排除
|
||||
|
||||
Reference in New Issue
Block a user