Compare commits

...

4 Commits

Author SHA1 Message Date
haozq c8b2c81cd9 Merge remote-tracking branch 'origin/main' 2024-12-19 13:35:47 +08:00
haozq e637af8970 图片拦截修改 2024-12-19 13:35:20 +08:00
haozq 71104dd12c Merge remote-tracking branch 'origin/main'
# Conflicts:
#	securityControl-modules/securityControl-proteam/src/main/java/com/sercurityControl/proteam/dutyTask/controller/AdmittedPersonController.java
#	securityControl-modules/securityControl-proteam/src/main/java/com/sercurityControl/proteam/dutyTask/controller/ResourceMonitorController.java
2024-12-19 11:29:26 +08:00
haozq b1befdc223 注解修改 2024-12-19 11:28:56 +08:00
7 changed files with 34 additions and 6 deletions

View File

@ -65,7 +65,8 @@ public class ParamSecureHandler implements AsyncHandlerInterceptor {
* 越权 放权的请求 指定的前缀 -公共的请求+数据接口 * 越权 放权的请求 指定的前缀 -公共的请求+数据接口
*/ */
public static String[] WHITE_URL=new String[]{"/sys/selected/","/dataCenter/inter/","/back/verify/"}; public static String[] WHITE_URL=new String[]{"/sys/selected/","/dataCenter/inter/","/back/verify/"};
//图片默认放权
public final static String images="JPG,PNG,JPEG,";
/** /**
* 越权白名单路径->指定的路径 * 越权白名单路径->指定的路径
*/ */
@ -144,6 +145,13 @@ public class ParamSecureHandler implements AsyncHandlerInterceptor {
*/ */
private boolean checkIsYq(HttpServletRequest request) throws Exception { private boolean checkIsYq(HttpServletRequest request) throws Exception {
String requestUri = request.getRequestURI(); String requestUri = request.getRequestURI();
if(requestUri.contains(".")){
String imageType=requestUri.substring(requestUri.lastIndexOf(".")+1).toUpperCase();
if (images.contains(imageType)){
return true;
}
}
if(Arrays.asList(WHITE_URLS).contains(requestUri)){ if(Arrays.asList(WHITE_URLS).contains(requestUri)){
return true; return true;
} }

View File

@ -49,6 +49,8 @@ public class ResponseEncryptFilter implements GlobalFilter, Ordered {
*/ */
public final static String KEY_HEAD="decrypt"; public final static String KEY_HEAD="decrypt";
public final static String images="JPG,PNG,JPEG,";
/**忽略加密的参数的请求*/ /**忽略加密的参数的请求*/
public static List<String> ignoreUrls = new ArrayList<>(); public static List<String> ignoreUrls = new ArrayList<>();
@ -61,8 +63,16 @@ public class ResponseEncryptFilter implements GlobalFilter, Ordered {
log.info("============================ResponseEncryptFilter start==================================="); log.info("============================ResponseEncryptFilter start===================================");
ServerHttpRequest request = exchange.getRequest(); ServerHttpRequest request = exchange.getRequest();
URI uri = request.getURI();
String reqPath = request.getURI().getPath(); String reqPath = request.getURI().getPath();
if(reqPath.contains(".")){
String imageType=reqPath.substring(reqPath.lastIndexOf(".")+1).toUpperCase();
if (images.contains(imageType)){
return chain.filter(exchange);
}
}
boolean sf = ignoreUrls.contains(reqPath); boolean sf = ignoreUrls.contains(reqPath);
if(sf){ if(sf){
return chain.filter(exchange); return chain.filter(exchange);

View File

@ -11,7 +11,7 @@ public class ResourcesConfigAdapter extends WebMvcConfigurerAdapter {
// registry.addResourceHandler("/files/**").addResourceLocations("file:/data/ahsbs/file/"); // registry.addResourceHandler("/files/**").addResourceLocations("file:/data/ahsbs/file/");
// super.addResourceHandlers(registry); // super.addResourceHandlers(registry);
registry.addResourceHandler("/files/**").addResourceLocations("file:D:\\file\\"); registry.addResourceHandler("/files/**").addResourceLocations("file:F:\\File\\");
super.addResourceHandlers(registry); super.addResourceHandlers(registry);
} }

View File

@ -3,7 +3,9 @@ package com.sercurityControl.proteam.dutyTask.controller;
import com.securityControl.common.core.utils.StringUtils; import com.securityControl.common.core.utils.StringUtils;
import com.securityControl.common.core.web.domain.AjaxResult; import com.securityControl.common.core.web.domain.AjaxResult;
import com.securityControl.common.log.annotation.Log; import com.securityControl.common.log.annotation.Log;
import com.securityControl.common.log.annotation.SysLog;
import com.securityControl.common.log.enums.BusinessType; import com.securityControl.common.log.enums.BusinessType;
import com.securityControl.common.log.enums.OperaType;
import com.securityControl.common.log.enums.OperationType; import com.securityControl.common.log.enums.OperationType;
import com.sercurityControl.proteam.dutyTask.service.DailyDutyReportService; import com.sercurityControl.proteam.dutyTask.service.DailyDutyReportService;
import com.sercurityControl.proteam.util.FileToBase64; import com.sercurityControl.proteam.util.FileToBase64;
@ -58,7 +60,7 @@ public class DailyDutyReportController {
* @date 2022-12-23 9:56 * @date 2022-12-23 9:56
*/ */
@PostMapping("getDailyData") @PostMapping("getDailyData")
@Log(title = "值班日报", menu = "值班任务->值班日报", businessType = BusinessType.QUERY, details = "值班日报列表") @SysLog(title = "值班日报", model = "值班任务->值班日报", operaType = OperaType.QUERY, details = "值班日报列表")
public AjaxResult getDailyData(String currentDay) { public AjaxResult getDailyData(String currentDay) {
Map<String, Object> map = new HashMap<>(16); Map<String, Object> map = new HashMap<>(16);
try { try {
@ -90,7 +92,7 @@ public class DailyDutyReportController {
} }
@GetMapping("downloadDaily") @GetMapping("downloadDaily")
@Log(title = "值班日报", menu = "值班任务->值班日报", businessType = BusinessType.EXPORT, details = "值班日报导出", grade = OperationType.EXPORT_BUSINESS) @SysLog(title = "值班日报", model = "值班任务->值班日报", operaType = OperaType.EXPORT, details = "值班日报导出")
public void downloadDaily(HttpServletRequest request, HttpServletResponse response, String currentDay, String chineseDate) { public void downloadDaily(HttpServletRequest request, HttpServletResponse response, String currentDay, String chineseDate) {
Map<String, Object> map = new HashMap<>(16); Map<String, Object> map = new HashMap<>(16);
Map<String, Object> data = new HashMap<>(16); Map<String, Object> data = new HashMap<>(16);

View File

@ -1,6 +1,8 @@
package com.sercurityControl.proteam.dutyTask.controller; package com.sercurityControl.proteam.dutyTask.controller;
import com.securityControl.common.core.web.domain.AjaxResult; import com.securityControl.common.core.web.domain.AjaxResult;
import com.securityControl.common.log.annotation.SysLog;
import com.securityControl.common.log.enums.OperaType;
import com.sercurityControl.proteam.dutyTask.domain.HistoryDto; import com.sercurityControl.proteam.dutyTask.domain.HistoryDto;
import com.sercurityControl.proteam.dutyTask.service.HistoryService; import com.sercurityControl.proteam.dutyTask.service.HistoryService;
import lombok.extern.slf4j.Slf4j; import lombok.extern.slf4j.Slf4j;
@ -29,6 +31,7 @@ public class HistoryController {
* @date 2024/1/25 15:28 * @date 2024/1/25 15:28
*/ */
@PostMapping("getHistoryByDateType") @PostMapping("getHistoryByDateType")
@SysLog(title = "综合展示", model = "综合展示->综合展示", operaType = OperaType.EXPORT, details = "历史记录查询")
public AjaxResult getHistoryByDateType(HistoryDto dto) { public AjaxResult getHistoryByDateType(HistoryDto dto) {
return service.getHistoryByDateType(dto); return service.getHistoryByDateType(dto);
} }

View File

@ -1,6 +1,8 @@
package com.sercurityControl.proteam.dutyTask.controller; package com.sercurityControl.proteam.dutyTask.controller;
import com.securityControl.common.core.web.domain.AjaxResult; import com.securityControl.common.core.web.domain.AjaxResult;
import com.securityControl.common.log.annotation.SysLog;
import com.securityControl.common.log.enums.OperaType;
import com.sercurityControl.proteam.dutyTask.domain.TicketInfoVo; import com.sercurityControl.proteam.dutyTask.domain.TicketInfoVo;
import com.sercurityControl.proteam.dutyTask.service.TicketService; import com.sercurityControl.proteam.dutyTask.service.TicketService;
import lombok.extern.slf4j.Slf4j; import lombok.extern.slf4j.Slf4j;
@ -34,6 +36,7 @@ public class TicketController {
* @date 2024/12/2 14:07 * @date 2024/12/2 14:07
*/ */
@PostMapping("getTicketInfo") @PostMapping("getTicketInfo")
@SysLog(title = "作业票管理", model = "告警记录->作业票管理", operaType = OperaType.EXPORT, details = "作业票管理记录查询")
public AjaxResult getTicketInfo(TicketInfoVo vo){ public AjaxResult getTicketInfo(TicketInfoVo vo){
return service.getTicketInfo(vo); return service.getTicketInfo(vo);
} }

View File

@ -3,7 +3,9 @@ package com.sercurityControl.proteam.supplement.controller;
import com.securityControl.common.core.utils.StringUtils; import com.securityControl.common.core.utils.StringUtils;
import com.securityControl.common.core.web.domain.AjaxResult; import com.securityControl.common.core.web.domain.AjaxResult;
import com.securityControl.common.log.annotation.Log; import com.securityControl.common.log.annotation.Log;
import com.securityControl.common.log.annotation.SysLog;
import com.securityControl.common.log.enums.BusinessType; import com.securityControl.common.log.enums.BusinessType;
import com.securityControl.common.log.enums.OperaType;
import com.securityControl.common.log.enums.OperationType; import com.securityControl.common.log.enums.OperationType;
import com.sercurityControl.proteam.dutyTask.domain.*; import com.sercurityControl.proteam.dutyTask.domain.*;
import com.sercurityControl.proteam.dutyTask.service.DayPaperService; import com.sercurityControl.proteam.dutyTask.service.DayPaperService;
@ -44,7 +46,7 @@ public class DailyReportController {
private DayPaperService dayPaperService; private DayPaperService dayPaperService;
@GetMapping("downloadDaily") @GetMapping("downloadDaily")
@Log(title = "值班日报", menu = "值班任务->值班日报", businessType = BusinessType.EXPORT, details = "值班日报导出", grade = OperationType.EXPORT_BUSINESS) @SysLog(title = "值班任务", model = "值班任务->值班日报", operaType = OperaType.EXPORT, details = "值班日报导出")
public void downloadDaily(HttpServletRequest request, HttpServletResponse response, String currentDay, String chineseDate) { public void downloadDaily(HttpServletRequest request, HttpServletResponse response, String currentDay, String chineseDate) {
download(request, response, currentDay, chineseDate); download(request, response, currentDay, chineseDate);
} }