From 26a6283e52928e85dd633e8b1c92c1afb545c1ec Mon Sep 17 00:00:00 2001
From: haozq <1611483981@qq.com>
Date: Tue, 30 Sep 2025 13:45:16 +0800
Subject: [PATCH] =?UTF-8?q?=E7=B3=BB=E7=BB=9F=E6=BC=8F=E6=B4=9E=E4=BF=AE?=
 =?UTF-8?q?=E5=A4=8D?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../bonus/common/security/interceptor/ParamSecureHandler.java  | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bonus-common/bonus-common-security/src/main/java/com/bonus/common/security/interceptor/ParamSecureHandler.java b/bonus-common/bonus-common-security/src/main/java/com/bonus/common/security/interceptor/ParamSecureHandler.java
index 391bd3b..892f701 100644
--- a/bonus-common/bonus-common-security/src/main/java/com/bonus/common/security/interceptor/ParamSecureHandler.java
+++ b/bonus-common/bonus-common-security/src/main/java/com/bonus/common/security/interceptor/ParamSecureHandler.java
@@ -52,7 +52,8 @@ public class ParamSecureHandler implements AsyncHandlerInterceptor {
         }
         XssRequestWrapper requestWrapper = new XssRequestWrapper(request);
         String requestUrl = requestWrapper.getRequestURI();
-        if("/operlog/addLogs".equals(requestUrl) || "/autoPractice/submitAnswe".equals(requestUrl)){
+        if("/operlog/addLogs".equals(requestUrl) || "/autoPractice/submitAnswe".equals(requestUrl)
+                || "/learningTask/updateQuestionAnswer".equals(requestUrl)  || "/learningTask/updateAnswer".equals(requestUrl)  ){
             return true;
         }
         /**