From e3264e81e3fc3dee18c8b4faf5e8d1c517daa601 Mon Sep 17 00:00:00 2001 From: lSun <15893999301@qq.com> Date: Fri, 24 Oct 2025 17:19:30 +0800 Subject: [PATCH] /caption --- bonus-admin/pom.xml | 5 +++++ .../framework/config/ResourcesConfig.java | 18 +++++++++--------- .../framework/filter/ReplayAttackFilter.java | 14 +++++++------- .../interceptor/ParamSecureHandler.java | 14 +++++++------- .../interceptor/ReplayAttackInterceptor.java | 16 ++++++++-------- .../interceptor/XssRequestWrapper.java | 4 ++-- 6 files changed, 38 insertions(+), 33 deletions(-) diff --git a/bonus-admin/pom.xml b/bonus-admin/pom.xml index ace4770..2e488cc 100644 --- a/bonus-admin/pom.xml +++ b/bonus-admin/pom.xml @@ -61,6 +61,11 @@ bonus-generator + + com.bonus + bonus-business + + diff --git a/bonus-framework/src/main/java/com/bonus/framework/config/ResourcesConfig.java b/bonus-framework/src/main/java/com/bonus/framework/config/ResourcesConfig.java index c50e1b0..f319522 100644 --- a/bonus-framework/src/main/java/com/bonus/framework/config/ResourcesConfig.java +++ b/bonus-framework/src/main/java/com/bonus/framework/config/ResourcesConfig.java @@ -66,15 +66,15 @@ public class ResourcesConfig implements WebMvcConfigurer // 防重放拦截器 registry.addInterceptor(replayAttackInterceptor) .addPathPatterns("/**") - .excludePathPatterns("/smartArchives/captchaImage") - .excludePathPatterns("/smartArchives/login") - .excludePathPatterns("/smartArchives/logout") - .excludePathPatterns("/smartArchives/getInfo") - .excludePathPatterns("/smartArchives/getRouters") - .excludePathPatterns("/smartArchives/session/check") - .excludePathPatterns("/smartArchives/sys/config/getConfig") - .excludePathPatterns("/smartArchives/data/Collect/queryById") - .excludePathPatterns("/smartArchives/file/share/queryById") + .excludePathPatterns("/caption/captchaImage") + .excludePathPatterns("/caption/login") + .excludePathPatterns("/caption/logout") + .excludePathPatterns("/caption/getInfo") + .excludePathPatterns("/caption/getRouters") + .excludePathPatterns("/caption/session/check") + .excludePathPatterns("/caption/sys/config/getConfig") + .excludePathPatterns("/caption/data/Collect/queryById") + .excludePathPatterns("/caption/file/share/queryById") .excludePathPatterns(EXCLUDEURLS) .order(-15); } diff --git a/bonus-framework/src/main/java/com/bonus/framework/filter/ReplayAttackFilter.java b/bonus-framework/src/main/java/com/bonus/framework/filter/ReplayAttackFilter.java index f8b9508..7cedb6c 100644 --- a/bonus-framework/src/main/java/com/bonus/framework/filter/ReplayAttackFilter.java +++ b/bonus-framework/src/main/java/com/bonus/framework/filter/ReplayAttackFilter.java @@ -46,13 +46,13 @@ import org.springframework.stereotype.Component; public class ReplayAttackFilter implements Filter { static List ignoreUrlPatterns = new ArrayList<>(); static { - ignoreUrlPatterns.add("/smartArchives/captchaImage"); - ignoreUrlPatterns.add("/smartArchives/login"); - ignoreUrlPatterns.add("/smartArchives/logout"); - ignoreUrlPatterns.add("/smartArchives/getInfo"); - ignoreUrlPatterns.add("/smartArchives/getRouters"); - ignoreUrlPatterns.add("/smartArchives/session/check"); - ignoreUrlPatterns.add("/smartArchives/sys/config/getConfig"); + ignoreUrlPatterns.add("/caption/captchaImage"); + ignoreUrlPatterns.add("/caption/login"); + ignoreUrlPatterns.add("/caption/logout"); + ignoreUrlPatterns.add("/caption/getInfo"); + ignoreUrlPatterns.add("/caption/getRouters"); + ignoreUrlPatterns.add("/caption/session/check"); + ignoreUrlPatterns.add("/caption/sys/config/getConfig"); } private final RedisCache redisUtil; diff --git a/bonus-framework/src/main/java/com/bonus/framework/interceptor/ParamSecureHandler.java b/bonus-framework/src/main/java/com/bonus/framework/interceptor/ParamSecureHandler.java index 6916db2..95e4679 100644 --- a/bonus-framework/src/main/java/com/bonus/framework/interceptor/ParamSecureHandler.java +++ b/bonus-framework/src/main/java/com/bonus/framework/interceptor/ParamSecureHandler.java @@ -30,13 +30,13 @@ public class ParamSecureHandler implements AsyncHandlerInterceptor { static List ignoreUrlPatterns = new ArrayList<>(); static { - ignoreUrlPatterns.add("/smartArchives/captchaImage"); - ignoreUrlPatterns.add("/smartArchives/login"); - ignoreUrlPatterns.add("/smartArchives/logout"); - ignoreUrlPatterns.add("/smartArchives/getInfo"); - ignoreUrlPatterns.add("/smartArchives/getRouters"); - ignoreUrlPatterns.add("/smartArchives/session/check"); - ignoreUrlPatterns.add("/smartArchives/sys/config/getConfig"); + ignoreUrlPatterns.add("/caption/captchaImage"); + ignoreUrlPatterns.add("/caption/login"); + ignoreUrlPatterns.add("/caption/logout"); + ignoreUrlPatterns.add("/caption/getInfo"); + ignoreUrlPatterns.add("/caption/getRouters"); + ignoreUrlPatterns.add("/caption/session/check"); + ignoreUrlPatterns.add("/caption/sys/config/getConfig"); } private String rnd = null; diff --git a/bonus-framework/src/main/java/com/bonus/framework/interceptor/ReplayAttackInterceptor.java b/bonus-framework/src/main/java/com/bonus/framework/interceptor/ReplayAttackInterceptor.java index 2467f16..739ce32 100644 --- a/bonus-framework/src/main/java/com/bonus/framework/interceptor/ReplayAttackInterceptor.java +++ b/bonus-framework/src/main/java/com/bonus/framework/interceptor/ReplayAttackInterceptor.java @@ -41,14 +41,14 @@ public class ReplayAttackInterceptor implements HandlerInterceptor { static List ignoreUrlPatterns = new ArrayList<>(); static { - ignoreUrlPatterns.add("/smartArchives/captchaImage"); - ignoreUrlPatterns.add("/smartArchives/login"); - ignoreUrlPatterns.add("/smartArchives/logout"); - ignoreUrlPatterns.add("/smartArchives/getInfo"); - ignoreUrlPatterns.add("/smartArchives/getRouters"); - ignoreUrlPatterns.add("/smartArchives/session/check"); - ignoreUrlPatterns.add("/smartArchives/sys/config/getConfig"); - ignoreUrlPatterns.add("/smartArchives/file/share/queryById"); + ignoreUrlPatterns.add("/caption/captchaImage"); + ignoreUrlPatterns.add("/caption/login"); + ignoreUrlPatterns.add("/caption/logout"); + ignoreUrlPatterns.add("/caption/getInfo"); + ignoreUrlPatterns.add("/caption/getRouters"); + ignoreUrlPatterns.add("/caption/session/check"); + ignoreUrlPatterns.add("/caption/sys/config/getConfig"); + ignoreUrlPatterns.add("/caption/file/share/queryById"); } private final RedisCache redisUtil; diff --git a/bonus-framework/src/main/java/com/bonus/framework/interceptor/XssRequestWrapper.java b/bonus-framework/src/main/java/com/bonus/framework/interceptor/XssRequestWrapper.java index 55ba593..8be3fb7 100644 --- a/bonus-framework/src/main/java/com/bonus/framework/interceptor/XssRequestWrapper.java +++ b/bonus-framework/src/main/java/com/bonus/framework/interceptor/XssRequestWrapper.java @@ -43,8 +43,8 @@ public class XssRequestWrapper extends HttpServletRequestWrapper { static { // 初始化忽略校验的URL路径 - IGNORE_SPECIAL_CHARS_URLS.add("/smartArchives/system/user/resetPwd"); - IGNORE_SPECIAL_CHARS_URLS.add("/smartArchives/system/user/profile/updatePwd"); + IGNORE_SPECIAL_CHARS_URLS.add("/caption/system/user/resetPwd"); + IGNORE_SPECIAL_CHARS_URLS.add("/caption/system/user/profile/updatePwd"); // 可以根据需要添加更多修改密码的URL // 初始化需要忽略的特殊字符模式