public/RuoYi-Cloud-Plus
1
0
Fork 0
mirror of https://gitee.com/dromara/RuoYi-Cloud-Plus.git synced 2026-05-05 03:21:29 +08:00
Code Issues Packages Projects Releases Wiki Activity

update 优化 xss 处理器 从gateway获取转发路径

Browse Source
This commit is contained in:
疯狂的狮子Li
2024-12-11 14:01:03 +08:00
parent 5aa96c5b02
commit 96245cf82d
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
ruoyi-common/ruoyi-common-web/src/main/java/org/dromara/common/web/filter/XssFilter.java
View File

@@ -3,6 +3,7 @@ package org.dromara.common.web.filter;
import jakarta.servlet.*; import jakarta.servlet.*;
import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse; import jakarta.servlet.http.HttpServletResponse;
import org.dromara.common.core.utils.ServletUtils;
import org.dromara.common.core.utils.SpringUtils; import org.dromara.common.core.utils.SpringUtils;
import org.dromara.common.core.utils.StringUtils; import org.dromara.common.core.utils.StringUtils;
import org.dromara.common.web.config.properties.XssProperties; import org.dromara.common.web.config.properties.XssProperties;
@@ -26,12 +27,13 @@ public class XssFilter implements Filter {
@Override @Override
public void init(FilterConfig filterConfig) throws ServletException { public void init(FilterConfig filterConfig) throws ServletException {
XssProperties properties = SpringUtils.getBean(XssProperties.class); XssProperties properties = SpringUtils.getBean(XssProperties.class);
String appName = SpringUtils.getApplicationName(); HttpServletRequest request = ServletUtils.getRequest();
String appPath = "/" + StringUtils.substring(appName, appName.indexOf("-") + 1); // 从请求头获取gateway转发的服务前缀
String prefix = StringUtils.blankToDefault(request.getHeader("X-Forwarded-Prefix"), "");
List<String> excludeUrls = properties.getExcludeUrls() List<String> excludeUrls = properties.getExcludeUrls()
.stream() .stream()
.filter(x -> StringUtils.startsWith(x, appPath)) .filter(x -> StringUtils.startsWith(x, prefix))
.map(x -> x.replaceFirst(appPath, StringUtils.EMPTY)) .map(x -> x.replaceFirst(prefix, StringUtils.EMPTY))
.toList(); .toList();
excludes.addAll(excludeUrls); excludes.addAll(excludeUrls);
} }