diff --git a/laws-base/laws-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java b/laws-base/laws-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java index 2074206f..2796b28f 100644 --- a/laws-base/laws-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java +++ b/laws-base/laws-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java @@ -52,13 +52,13 @@ public class CsrfFilter implements Filter { HttpServletResponse res = (HttpServletResponse) response; // 获取是否为websocket链接 String upgrade = req.getHeader("Upgrade"); + // 获取请求url地址 + String url = req.getRequestURL().toString(); // 获取来源 String referurl = req.getHeader("Referer"); - if(isWhiteReq(referurl) || Objects.equals(upgrade,"websocket")){ + if(isWhiteReq(referurl) || Objects.equals(upgrade,"websocket") || url.contains("view")){ chain.doFilter(request, response); }else{ - // 获取请求url地址 - String url = req.getRequestURL().toString(); String log = ""; String date = new SimpleDateFormat("yyyyMMddHHmmss").format(new Date()); String ip = getIp(req);