ZQ/laws-sinotruk-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix 解决kkfile预览时跨站问题

Browse Source
This commit is contained in:
lijiarao
2024-01-11 14:58:08 +08:00
parent e2e7a16c56
commit ba53565a0e
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
laws-base/laws-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java
+3 -3
View File
@@ -52,13 +52,13 @@ public class CsrfFilter implements Filter {
HttpServletResponse res = (HttpServletResponse) response; HttpServletResponse res = (HttpServletResponse) response;
// 获取是否为websocket链接 // 获取是否为websocket链接
String upgrade = req.getHeader("Upgrade"); String upgrade = req.getHeader("Upgrade");
// 获取请求url地址
String url = req.getRequestURL().toString();
// 获取来源 // 获取来源
String referurl = req.getHeader("Referer"); String referurl = req.getHeader("Referer");
if(isWhiteReq(referurl) || Objects.equals(upgrade,"websocket")){ if(isWhiteReq(referurl) || Objects.equals(upgrade,"websocket") || url.contains("view")){
chain.doFilter(request, response); chain.doFilter(request, response);
}else{ }else{
// 获取请求url地址
String url = req.getRequestURL().toString();
String log = ""; String log = "";
String date = new SimpleDateFormat("yyyyMMddHHmmss").format(new Date()); String date = new SimpleDateFormat("yyyyMMddHHmmss").format(new Date());
String ip = getIp(req); String ip = getIp(req);