This commit is contained in:
lSun 2025-10-24 17:19:30 +08:00
parent 1645c9b74c
commit e3264e81e3
6 changed files with 38 additions and 33 deletions

View File

@ -61,6 +61,11 @@
<artifactId>bonus-generator</artifactId> <artifactId>bonus-generator</artifactId>
</dependency> </dependency>
<dependency>
<groupId>com.bonus</groupId>
<artifactId>bonus-business</artifactId>
</dependency>
</dependencies> </dependencies>
<build> <build>

View File

@ -66,15 +66,15 @@ public class ResourcesConfig implements WebMvcConfigurer
// 防重放拦截器 // 防重放拦截器
registry.addInterceptor(replayAttackInterceptor) registry.addInterceptor(replayAttackInterceptor)
.addPathPatterns("/**") .addPathPatterns("/**")
.excludePathPatterns("/smartArchives/captchaImage") .excludePathPatterns("/caption/captchaImage")
.excludePathPatterns("/smartArchives/login") .excludePathPatterns("/caption/login")
.excludePathPatterns("/smartArchives/logout") .excludePathPatterns("/caption/logout")
.excludePathPatterns("/smartArchives/getInfo") .excludePathPatterns("/caption/getInfo")
.excludePathPatterns("/smartArchives/getRouters") .excludePathPatterns("/caption/getRouters")
.excludePathPatterns("/smartArchives/session/check") .excludePathPatterns("/caption/session/check")
.excludePathPatterns("/smartArchives/sys/config/getConfig") .excludePathPatterns("/caption/sys/config/getConfig")
.excludePathPatterns("/smartArchives/data/Collect/queryById") .excludePathPatterns("/caption/data/Collect/queryById")
.excludePathPatterns("/smartArchives/file/share/queryById") .excludePathPatterns("/caption/file/share/queryById")
.excludePathPatterns(EXCLUDEURLS) .excludePathPatterns(EXCLUDEURLS)
.order(-15); .order(-15);
} }

View File

@ -46,13 +46,13 @@ import org.springframework.stereotype.Component;
public class ReplayAttackFilter implements Filter { public class ReplayAttackFilter implements Filter {
static List<String> ignoreUrlPatterns = new ArrayList<>(); static List<String> ignoreUrlPatterns = new ArrayList<>();
static { static {
ignoreUrlPatterns.add("/smartArchives/captchaImage"); ignoreUrlPatterns.add("/caption/captchaImage");
ignoreUrlPatterns.add("/smartArchives/login"); ignoreUrlPatterns.add("/caption/login");
ignoreUrlPatterns.add("/smartArchives/logout"); ignoreUrlPatterns.add("/caption/logout");
ignoreUrlPatterns.add("/smartArchives/getInfo"); ignoreUrlPatterns.add("/caption/getInfo");
ignoreUrlPatterns.add("/smartArchives/getRouters"); ignoreUrlPatterns.add("/caption/getRouters");
ignoreUrlPatterns.add("/smartArchives/session/check"); ignoreUrlPatterns.add("/caption/session/check");
ignoreUrlPatterns.add("/smartArchives/sys/config/getConfig"); ignoreUrlPatterns.add("/caption/sys/config/getConfig");
} }
private final RedisCache redisUtil; private final RedisCache redisUtil;

View File

@ -30,13 +30,13 @@ public class ParamSecureHandler implements AsyncHandlerInterceptor {
static List<String> ignoreUrlPatterns = new ArrayList<>(); static List<String> ignoreUrlPatterns = new ArrayList<>();
static { static {
ignoreUrlPatterns.add("/smartArchives/captchaImage"); ignoreUrlPatterns.add("/caption/captchaImage");
ignoreUrlPatterns.add("/smartArchives/login"); ignoreUrlPatterns.add("/caption/login");
ignoreUrlPatterns.add("/smartArchives/logout"); ignoreUrlPatterns.add("/caption/logout");
ignoreUrlPatterns.add("/smartArchives/getInfo"); ignoreUrlPatterns.add("/caption/getInfo");
ignoreUrlPatterns.add("/smartArchives/getRouters"); ignoreUrlPatterns.add("/caption/getRouters");
ignoreUrlPatterns.add("/smartArchives/session/check"); ignoreUrlPatterns.add("/caption/session/check");
ignoreUrlPatterns.add("/smartArchives/sys/config/getConfig"); ignoreUrlPatterns.add("/caption/sys/config/getConfig");
} }
private String rnd = null; private String rnd = null;

View File

@ -41,14 +41,14 @@ public class ReplayAttackInterceptor implements HandlerInterceptor {
static List<String> ignoreUrlPatterns = new ArrayList<>(); static List<String> ignoreUrlPatterns = new ArrayList<>();
static { static {
ignoreUrlPatterns.add("/smartArchives/captchaImage"); ignoreUrlPatterns.add("/caption/captchaImage");
ignoreUrlPatterns.add("/smartArchives/login"); ignoreUrlPatterns.add("/caption/login");
ignoreUrlPatterns.add("/smartArchives/logout"); ignoreUrlPatterns.add("/caption/logout");
ignoreUrlPatterns.add("/smartArchives/getInfo"); ignoreUrlPatterns.add("/caption/getInfo");
ignoreUrlPatterns.add("/smartArchives/getRouters"); ignoreUrlPatterns.add("/caption/getRouters");
ignoreUrlPatterns.add("/smartArchives/session/check"); ignoreUrlPatterns.add("/caption/session/check");
ignoreUrlPatterns.add("/smartArchives/sys/config/getConfig"); ignoreUrlPatterns.add("/caption/sys/config/getConfig");
ignoreUrlPatterns.add("/smartArchives/file/share/queryById"); ignoreUrlPatterns.add("/caption/file/share/queryById");
} }
private final RedisCache redisUtil; private final RedisCache redisUtil;

View File

@ -43,8 +43,8 @@ public class XssRequestWrapper extends HttpServletRequestWrapper {
static { static {
// 初始化忽略校验的URL路径 // 初始化忽略校验的URL路径
IGNORE_SPECIAL_CHARS_URLS.add("/smartArchives/system/user/resetPwd"); IGNORE_SPECIAL_CHARS_URLS.add("/caption/system/user/resetPwd");
IGNORE_SPECIAL_CHARS_URLS.add("/smartArchives/system/user/profile/updatePwd"); IGNORE_SPECIAL_CHARS_URLS.add("/caption/system/user/profile/updatePwd");
// 可以根据需要添加更多修改密码的URL // 可以根据需要添加更多修改密码的URL
// 初始化需要忽略的特殊字符模式 // 初始化需要忽略的特殊字符模式