bonus
/
smart_archives_service
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

系统框架整改

This commit is contained in:
cwchen 2025-09-09 10:29:19 +08:00
parent cfd6bc9e69
commit a5b3abca96
3 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
bonus-common/pom.xml
View File

@ -153,6 +153,12 @@
<version>20231013</version> <version>20231013</version>
</dependency> </dependency>
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>32.1.3-jre</version> <!-- 请使用最新版本 -->
</dependency>
</dependencies> </dependencies>
</project> </project>

4
bonus-framework/src/main/java/com/bonus/framework/interceptor/ParamSecureHandler.java
View File

@ -70,13 +70,13 @@ public class ParamSecureHandler implements AsyncHandlerInterceptor {
/** /**
* 校验参数是否合法 * 校验参数是否合法
*/ */
/*if (!requestWrapper.isChecked()) { if (!requestWrapper.isChecked()) {
log.error("输入值非法: queryString={}, body={}", log.error("输入值非法: queryString={}, body={}",
StringUtils.defaultString(requestWrapper.getQueryString(), "null"), StringUtils.defaultString(requestWrapper.getQueryString(), "null"),
StringUtils.defaultString(requestWrapper.getReaderParam(), "null")); StringUtils.defaultString(requestWrapper.getReaderParam(), "null"));
returnJson(response, "输入值非法", 500); returnJson(response, "输入值非法", 500);
return false; return false;
}*/ }
// System.err.println(JSON.toJSONString(request.getParameterMap())); // System.err.println(JSON.toJSONString(request.getParameterMap()));
/** /**

2
bonus-framework/src/main/java/com/bonus/framework/interceptor/XssRequestWrapper.java
View File

@ -167,7 +167,7 @@ public class XssRequestWrapper extends HttpServletRequestWrapper {
private static final String regex10 = "onload(.*?)="; private static final String regex10 = "onload(.*?)=";
// 添加安全脚本模式 // 添加安全脚本模式
public static final String SAFE_SCRIPT_PATTERN = "(\\||;|\\$|'|\\'|0x0d|0x0a|\\%27|\\%3B|<>|\\[\\]|\\(\\)|/|\"|script|alert|svg|confirm|prompt|onload|%3c|%3e|%2b|@|!|img|src)"; public static final String SAFE_SCRIPT_PATTERN = "(\\||;|\\$|'|\\'|0x0d|0x0a|\\%27|\\%3B|<>|\\[\\]|\\(\\)|\"|script|alert|svg|confirm|prompt|onload|%3c|%3e|%2b|@|!|img|src)";
private String xssClean(String value) { private String xssClean(String value) {
if (value == null) { if (value == null) {