RuoYi
2023-11-07 8cf8c8acd059969b9e79ad1c2f9f1921cc42d69c
ruoyi-common/src/main/java/com/ruoyi/common/filter/XssHttpServletRequestWrapper.java
@@ -34,13 +34,13 @@
        if (values != null)
        {
            int length = values.length;
            String[] escapseValues = new String[length];
            String[] escapesValues = new String[length];
            for (int i = 0; i < length; i++)
            {
                // 防xss攻击和过滤前后空格
                escapseValues[i] = EscapeUtil.clean(values[i]).trim();
                escapesValues[i] = EscapeUtil.clean(values[i]).trim();
            }
            return escapseValues;
            return escapesValues;
        }
        return super.getParameterValues(name);
    }
@@ -63,7 +63,8 @@
        // xss过滤
        json = EscapeUtil.clean(json).trim();
        final ByteArrayInputStream bis = new ByteArrayInputStream(json.getBytes("utf-8"));
        byte[] jsonBytes = json.getBytes("utf-8");
        final ByteArrayInputStream bis = new ByteArrayInputStream(jsonBytes);
        return new ServletInputStream()
        {
            @Override
@@ -79,6 +80,12 @@
            }
            @Override
            public int available() throws IOException
            {
                return jsonBytes.length;
            }
            @Override
            public void setReadListener(ReadListener readListener)
            {
            }