bonus
/
smart_archives_web
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

前端校验

This commit is contained in:
cwchen 2025-09-30 09:42:45 +08:00
parent 163c41a84b
commit 56b01565a7
7 changed files with 119 additions and 46 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/utils/request.js
View File

@ -119,7 +119,10 @@ service.interceptors.request.use(
requestUrl += '?' + paramsString
}
}
const signature = generateRequestSignature(userId, timestamp, method, requestUrl, userSecret)
console.log(signature);
console.log(requestUrl);
config.headers['timestamp'] = timestamp
config.headers['X-Signature'] = signature
} catch (error) {

117
src/utils/validate.js
View File

@ -5,9 +5,12 @@
* @returns {Boolean}
*/
export function isPathMatch(pattern, path) {
const regexPattern = pattern.replace(/\//g, '\\/').replace(/\*\*/g, '.*').replace(/\*/g, '[^\\/]*')
const regex = new RegExp(`^${regexPattern}$`)
return regex.test(path)
const regexPattern = pattern
.replace(/\//g, '\\/')
.replace(/\*\*/g, '.*')
.replace(/\*/g, '[^\\/]*')
const regex = new RegExp(`^${regexPattern}$`)
return regex.test(path)
}
/**
@ -16,10 +19,15 @@ export function isPathMatch(pattern, path) {
* @returns {Boolean}
*/
export function isEmpty(value) {
if (value == null || value == "" || value == undefined || value == "undefined") {
return true
}
return false
if (
value == null ||
value == '' ||
value == undefined ||
value == 'undefined'
) {
return true
}
return false
}
/**
@ -28,7 +36,7 @@ export function isEmpty(value) {
* @returns {Boolean}
*/
export function isHttp(url) {
return url.indexOf('http://') !== -1 || url.indexOf('https://') !== -1
return url.indexOf('http://') !== -1 || url.indexOf('https://') !== -1
}
/**
@ -37,7 +45,7 @@ export function isHttp(url) {
* @returns {Boolean}
*/
export function isExternal(path) {
return /^(https?:|mailto:|tel:)/.test(path)
return /^(https?:|mailto:|tel:)/.test(path)
}
/**
@ -45,8 +53,8 @@ export function isExternal(path) {
* @returns {Boolean}
*/
export function validUsername(str) {
const valid_map = ['admin', 'editor']
return valid_map.indexOf(str.trim()) >= 0
const valid_map = ['admin', 'editor']
return valid_map.indexOf(str.trim()) >= 0
}
/**
@ -54,8 +62,9 @@ export function validUsername(str) {
* @returns {Boolean}
*/
export function validURL(url) {
const reg = /^(https?|ftp):\/\/([a-zA-Z0-9.-]+(:[a-zA-Z0-9.&%$-]+)*@)*((25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9][0-9]?)(\.(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){3}|([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+\.(com|edu|gov|int|mil|net|org|biz|arpa|info|name|pro|aero|coop|museum|[a-zA-Z]{2}))(:[0-9]+)*(\/($|[a-zA-Z0-9.,?'\\+&%$#=~_-]+))*$/
return reg.test(url)
const reg =
/^(https?|ftp):\/\/([a-zA-Z0-9.-]+(:[a-zA-Z0-9.&%$-]+)*@)*((25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9][0-9]?)(\.(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){3}|([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+\.(com|edu|gov|int|mil|net|org|biz|arpa|info|name|pro|aero|coop|museum|[a-zA-Z]{2}))(:[0-9]+)*(\/($|[a-zA-Z0-9.,?'\\+&%$#=~_-]+))*$/
return reg.test(url)
}
/**
@ -63,8 +72,8 @@ export function validURL(url) {
* @returns {Boolean}
*/
export function validLowerCase(str) {
const reg = /^[a-z]+$/
return reg.test(str)
const reg = /^[a-z]+$/
return reg.test(str)
}
/**
@ -72,8 +81,8 @@ export function validLowerCase(str) {
* @returns {Boolean}
*/
export function validUpperCase(str) {
const reg = /^[A-Z]+$/
return reg.test(str)
const reg = /^[A-Z]+$/
return reg.test(str)
}
/**
@ -81,8 +90,8 @@ export function validUpperCase(str) {
* @returns {Boolean}
*/
export function validAlphabets(str) {
const reg = /^[A-Za-z]+$/
return reg.test(str)
const reg = /^[A-Za-z]+$/
return reg.test(str)
}
/**
@ -90,8 +99,9 @@ export function validAlphabets(str) {
* @returns {Boolean}
*/
export function validEmail(email) {
const reg = /^(([^<>()\[\]\\.,;:\s@"]+(\.[^<>()\[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/
return reg.test(email)
const reg =
/^(([^<>()\[\]\\.,;:\s@"]+(\.[^<>()\[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/
return reg.test(email)
}
/**
@ -99,7 +109,7 @@ export function validEmail(email) {
* @returns {Boolean}
*/
export function isString(str) {
return typeof str === 'string' || str instanceof String
return typeof str === 'string' || str instanceof String
}
/**
@ -107,10 +117,10 @@ export function isString(str) {
* @returns {Boolean}
*/
export function isArray(arg) {
if (typeof Array.isArray === 'undefined') {
return Object.prototype.toString.call(arg) === '[object Array]'
}
return Array.isArray(arg)
if (typeof Array.isArray === 'undefined') {
return Object.prototype.toString.call(arg) === '[object Array]'
}
return Array.isArray(arg)
}
/**
@ -119,19 +129,19 @@ export function isArray(arg) {
* @returns {Boolean}
*/
export function isIPv4(ip) {
if (typeof ip !== 'string') return false
// 基础格式校验：四段数字
const parts = ip.split('.')
if (parts.length !== 4) return false
for (let i = 0; i < parts.length; i++) {
const seg = parts[i]
// 不能为空，必须为数字，不能有前导零(允许单个0)
if (seg === '' || /\D/.test(seg)) return false
if (seg.length > 1 && seg[0] === '0') return false
const n = Number(seg)
if (n < 0 || n > 255) return false
}
return true
if (typeof ip !== 'string') return false
// 基础格式校验：四段数字
const parts = ip.split('.')
if (parts.length !== 4) return false
for (let i = 0; i < parts.length; i++) {
const seg = parts[i]
// 不能为空，必须为数字，不能有前导零(允许单个0)
if (seg === '' || /\D/.test(seg)) return false
if (seg.length > 1 && seg[0] === '0') return false
const n = Number(seg)
if (n < 0 || n > 255) return false
}
return true
}
/**
@ -140,8 +150,8 @@ export function isIPv4(ip) {
* @returns {number}
*/
function ipv4ToInt(ip) {
const [a, b, c, d] = ip.split('.').map(Number)
return ((a << 24) >>> 0) + (b << 16) + (c << 8) + d
const [a, b, c, d] = ip.split('.').map(Number)
return ((a << 24) >>> 0) + (b << 16) + (c << 8) + d
}
/**
@ -151,6 +161,27 @@ function ipv4ToInt(ip) {
* @returns {Boolean}
*/
export function isIPv4RangeOrder(start, end) {
if (!isIPv4(start) || !isIPv4(end)) return false
return ipv4ToInt(start) <= ipv4ToInt(end)
if (!isIPv4(start) || !isIPv4(end)) return false
return ipv4ToInt(start) <= ipv4ToInt(end)
}
/**
* 统一安全校验方法
* 使用方法：validSecurity(str) 返回 true/false
*/
/**
* 统一安全校验方法
* 使用方法：validSecurity(str) 返回 true/false
*/
export function validSecurity(str) {
if (!str || typeof str !== 'string') {
return true;
}
// 将所有正则模式合并为一个统一的正则表达式
const securityRegex = /<script>(.*?)<\/script>|src[\r\n]*=[\r\n]*'(.*?)'|src[\r\n]*=[\r\n]*"(.*?)"|<\/script>|<script(.*?)>|eval\((.*?)\)|e-xpression\((.*?)\)|javascript:|vbscript:|onload(.*?)=|onerror(.*?)=|onclick(.*?)=|onmouseover(.*?)=|alert\((.*?)\)|<.*>|\[.*\]|\(.*\)|'.*'|".*"|%3c|%3e|%2f|%27|%22|%2b|%3b|%28|%29|%5b|%5d|@.*|!.*|%.*|\\x3c|\\x3e|\\x2f|\\x27|\\x22|data:text\/html|base64|document\.|window\.|location\.|cookie|--|\/\*.*?\*\/|#|'|"|\bselect\b|\binsert\b|\bupdate\b|\bdelete\b|\bdrop\b|\btruncate\b|\balter\b|\bcreate\b|\bexec\b|\bexecute\b|\bdeclare\b|\bxp_cmdshell\b|\bsp_\w+\b|\bchar\b|\bascii\b|\bsubstr\b|\bsubstring\b|\bconcat\b|\bmaster\b|\bsys\b|\binformation_schema\b|\bunion\b|\binto\b|\bfrom\b|\bwhere\b|\band\b|\bor\b/i;
return !securityRegex.test(str);
}

7
src/views/archivesManagement/archClass/archCatalogue/components/leftTree.vue
View File

@ -55,6 +55,7 @@
<script>
import { getArchivalCatalogueTreeApi,delArchiveApi } from '@/api/archivesManagement/index.js'
import AddTreeData from './addTreeData.vue'
import { validSecurity } from '@/utils/validate'
export default {
name: 'LeftTree',
components: { AddTreeData },
@ -154,6 +155,7 @@ export default {
this.selectedNodeId = data.id;
this.$emit('handleNodeClick', data)
},
// 树数据过滤 - 支持无限层级转换
convertToVueTree(data) {
if (!data || !Array.isArray(data)) {
@ -205,6 +207,11 @@ export default {
},
// 搜索
onHandleSearch() {
// 安全校验
if (this.filterText && !validSecurity(this.filterText)) {
this.$message.error('搜索内容包含非法字符，请重新输入')
return
}
this.$refs.leftTreeRef.filter(this.filterText)
},
// 树节点过滤方法

7
src/views/archivesManagement/fileManager/components/leftTree.vue
View File

@ -56,6 +56,7 @@
<script>
import { getFileManageTreeApi, delFileManageApi } from '@/api/archivesManagement/fileManager/fileManager.js'
import FileAddTreeData from './addTreeData.vue'
import { validSecurity } from '@/utils/validate'
export default {
name: 'FileLeftTree',
components: { FileAddTreeData },
@ -154,6 +155,7 @@ export default {
this.selectedNodeId = data.id;
this.$emit('handleNodeClick', data)
},
// 树数据过滤 - 支持无限层级转换
convertToVueTree(data) {
if (!data || !Array.isArray(data)) {
@ -208,6 +210,11 @@ export default {
},
// 搜索
onHandleSearch() {
// 安全校验
if (this.filterText && !validSecurity(this.filterText)) {
this.$message.error('搜索内容包含非法字符，请重新输入')
return
}
this.$refs.leftTreeRef.filter(this.filterText)
},
// 树节点过滤方法

7
src/views/common/fileTree.vue
View File

@ -35,6 +35,7 @@ import _ from 'lodash'
import {
getFileManageTreeApi
} from '@/api/filesTransfer/apply'
import { validSecurity } from '@/utils/validate'
export default {
name: "FileTree",
props: ["width", "title", "rowData"],
@ -121,8 +122,14 @@ export default {
// 保存选中的节点ID
this.selectedNodeId = data.id;
},
// 搜索
onHandleSearch() {
// 安全校验
if (this.filterText && !validSecurity(this.filterText)) {
this.$message.error('搜索内容包含非法字符，请重新输入')
return
}
this.$refs.leftTreeRef.filter(this.filterText)
},
// 树节点过滤方法

9
src/views/data-collect/data-set-manage/components/left-tree.vue
View File

@ -25,6 +25,7 @@
<script>
import { getLeftTreeListAPI } from '@/api/data-collect/data-set-manage'
import { validSecurity } from '@/utils/validate'
export default {
name: 'LeftTree',
data() {
@ -48,6 +49,7 @@ export default {
onHandleNodeClick(data) {
this.$emit('handleNodeClick', data)
},
convertToVueTree(data) {
return data.map(item => ({
id: item.code,
@ -75,6 +77,13 @@ export default {
this.displayedTreeData = JSON.parse(JSON.stringify(this.treeDataList))
return
}
// 安全校验
if (!validSecurity(this.filterText)) {
this.$message.error('输入内容包含非法字符，请重新输入')
return
}
this.displayedTreeData = this.filterTreeData(this.treeDataList)
},
// 递归过滤树数据

9
src/views/data-collect/data-set-manage/components/right-table.vue
View File

@ -39,6 +39,7 @@
<script>
import { getListDataSetAPI } from '@/api/data-collect/data-set-manage'
import Share from './share.vue'
import { validSecurity } from '@/utils/validate'
export default {
name: 'RightTable',
components: {
@ -95,6 +96,7 @@ export default {
showColose() {
this.isflag = false;
},
// 查询：按第一列字段做模糊匹配
onHandleQuery() {
if (!Array.isArray(this.columns) || this.columns.length < 1) return
@ -106,6 +108,13 @@ export default {
this.filteredManual = null
return
}
// 安全校验
if (!validSecurity(keyword)) {
this.$message.error('搜索内容包含非法字符，请重新输入')
return
}
// 执行一次性本地过滤
const source = Array.isArray(this.tableData) ? this.tableData : []
const kw = keyword.toLowerCase()