/caption
This commit is contained in:
parent
1645c9b74c
commit
e3264e81e3
|
|
@ -61,6 +61,11 @@
|
|||
<artifactId>bonus-generator</artifactId>
|
||||
</dependency>
|
||||
|
||||
<dependency>
|
||||
<groupId>com.bonus</groupId>
|
||||
<artifactId>bonus-business</artifactId>
|
||||
</dependency>
|
||||
|
||||
</dependencies>
|
||||
|
||||
<build>
|
||||
|
|
|
|||
|
|
@ -66,15 +66,15 @@ public class ResourcesConfig implements WebMvcConfigurer
|
|||
// 防重放拦截器
|
||||
registry.addInterceptor(replayAttackInterceptor)
|
||||
.addPathPatterns("/**")
|
||||
.excludePathPatterns("/smartArchives/captchaImage")
|
||||
.excludePathPatterns("/smartArchives/login")
|
||||
.excludePathPatterns("/smartArchives/logout")
|
||||
.excludePathPatterns("/smartArchives/getInfo")
|
||||
.excludePathPatterns("/smartArchives/getRouters")
|
||||
.excludePathPatterns("/smartArchives/session/check")
|
||||
.excludePathPatterns("/smartArchives/sys/config/getConfig")
|
||||
.excludePathPatterns("/smartArchives/data/Collect/queryById")
|
||||
.excludePathPatterns("/smartArchives/file/share/queryById")
|
||||
.excludePathPatterns("/caption/captchaImage")
|
||||
.excludePathPatterns("/caption/login")
|
||||
.excludePathPatterns("/caption/logout")
|
||||
.excludePathPatterns("/caption/getInfo")
|
||||
.excludePathPatterns("/caption/getRouters")
|
||||
.excludePathPatterns("/caption/session/check")
|
||||
.excludePathPatterns("/caption/sys/config/getConfig")
|
||||
.excludePathPatterns("/caption/data/Collect/queryById")
|
||||
.excludePathPatterns("/caption/file/share/queryById")
|
||||
.excludePathPatterns(EXCLUDEURLS)
|
||||
.order(-15);
|
||||
}
|
||||
|
|
|
|||
|
|
@ -46,13 +46,13 @@ import org.springframework.stereotype.Component;
|
|||
public class ReplayAttackFilter implements Filter {
|
||||
static List<String> ignoreUrlPatterns = new ArrayList<>();
|
||||
static {
|
||||
ignoreUrlPatterns.add("/smartArchives/captchaImage");
|
||||
ignoreUrlPatterns.add("/smartArchives/login");
|
||||
ignoreUrlPatterns.add("/smartArchives/logout");
|
||||
ignoreUrlPatterns.add("/smartArchives/getInfo");
|
||||
ignoreUrlPatterns.add("/smartArchives/getRouters");
|
||||
ignoreUrlPatterns.add("/smartArchives/session/check");
|
||||
ignoreUrlPatterns.add("/smartArchives/sys/config/getConfig");
|
||||
ignoreUrlPatterns.add("/caption/captchaImage");
|
||||
ignoreUrlPatterns.add("/caption/login");
|
||||
ignoreUrlPatterns.add("/caption/logout");
|
||||
ignoreUrlPatterns.add("/caption/getInfo");
|
||||
ignoreUrlPatterns.add("/caption/getRouters");
|
||||
ignoreUrlPatterns.add("/caption/session/check");
|
||||
ignoreUrlPatterns.add("/caption/sys/config/getConfig");
|
||||
}
|
||||
|
||||
private final RedisCache redisUtil;
|
||||
|
|
|
|||
|
|
@ -30,13 +30,13 @@ public class ParamSecureHandler implements AsyncHandlerInterceptor {
|
|||
|
||||
static List<String> ignoreUrlPatterns = new ArrayList<>();
|
||||
static {
|
||||
ignoreUrlPatterns.add("/smartArchives/captchaImage");
|
||||
ignoreUrlPatterns.add("/smartArchives/login");
|
||||
ignoreUrlPatterns.add("/smartArchives/logout");
|
||||
ignoreUrlPatterns.add("/smartArchives/getInfo");
|
||||
ignoreUrlPatterns.add("/smartArchives/getRouters");
|
||||
ignoreUrlPatterns.add("/smartArchives/session/check");
|
||||
ignoreUrlPatterns.add("/smartArchives/sys/config/getConfig");
|
||||
ignoreUrlPatterns.add("/caption/captchaImage");
|
||||
ignoreUrlPatterns.add("/caption/login");
|
||||
ignoreUrlPatterns.add("/caption/logout");
|
||||
ignoreUrlPatterns.add("/caption/getInfo");
|
||||
ignoreUrlPatterns.add("/caption/getRouters");
|
||||
ignoreUrlPatterns.add("/caption/session/check");
|
||||
ignoreUrlPatterns.add("/caption/sys/config/getConfig");
|
||||
}
|
||||
private String rnd = null;
|
||||
|
||||
|
|
|
|||
|
|
@ -41,14 +41,14 @@ public class ReplayAttackInterceptor implements HandlerInterceptor {
|
|||
static List<String> ignoreUrlPatterns = new ArrayList<>();
|
||||
|
||||
static {
|
||||
ignoreUrlPatterns.add("/smartArchives/captchaImage");
|
||||
ignoreUrlPatterns.add("/smartArchives/login");
|
||||
ignoreUrlPatterns.add("/smartArchives/logout");
|
||||
ignoreUrlPatterns.add("/smartArchives/getInfo");
|
||||
ignoreUrlPatterns.add("/smartArchives/getRouters");
|
||||
ignoreUrlPatterns.add("/smartArchives/session/check");
|
||||
ignoreUrlPatterns.add("/smartArchives/sys/config/getConfig");
|
||||
ignoreUrlPatterns.add("/smartArchives/file/share/queryById");
|
||||
ignoreUrlPatterns.add("/caption/captchaImage");
|
||||
ignoreUrlPatterns.add("/caption/login");
|
||||
ignoreUrlPatterns.add("/caption/logout");
|
||||
ignoreUrlPatterns.add("/caption/getInfo");
|
||||
ignoreUrlPatterns.add("/caption/getRouters");
|
||||
ignoreUrlPatterns.add("/caption/session/check");
|
||||
ignoreUrlPatterns.add("/caption/sys/config/getConfig");
|
||||
ignoreUrlPatterns.add("/caption/file/share/queryById");
|
||||
}
|
||||
|
||||
private final RedisCache redisUtil;
|
||||
|
|
|
|||
|
|
@ -43,8 +43,8 @@ public class XssRequestWrapper extends HttpServletRequestWrapper {
|
|||
|
||||
static {
|
||||
// 初始化忽略校验的URL路径
|
||||
IGNORE_SPECIAL_CHARS_URLS.add("/smartArchives/system/user/resetPwd");
|
||||
IGNORE_SPECIAL_CHARS_URLS.add("/smartArchives/system/user/profile/updatePwd");
|
||||
IGNORE_SPECIAL_CHARS_URLS.add("/caption/system/user/resetPwd");
|
||||
IGNORE_SPECIAL_CHARS_URLS.add("/caption/system/user/profile/updatePwd");
|
||||
// 可以根据需要添加更多修改密码的URL
|
||||
|
||||
// 初始化需要忽略的特殊字符模式
|
||||
|
|
|
|||
Loading…
Reference in New Issue