更新

kongzy

2024-01-29 983bdb5b89932b38d08a11ad1eed6ea89d1597e1

 assess-framework/src/main/java/com/gkhy/assess/framework/config/FilterConfig.java

@@ -25,26 +25,31 @@

    @Value("${xss.urlPatterns}")
    private String urlPatterns;
//
//    @SuppressWarnings({ "rawtypes", "unchecked" })
//    @Bean
//    @ConditionalOnProperty(value = "xss.enabled", havingValue = "true")
//    public FilterRegistrationBean xssFilterRegistration()
//    {
//        FilterRegistrationBean registration = new FilterRegistrationBean();
//        registration.setDispatcherTypes(DispatcherType.REQUEST);
//        registration.setFilter(new XssFilter());
//        registration.addUrlPatterns(String.valueOf(StringUtils.split(urlPatterns, ",")));
//        registration.setName("xssFilter");
//        registration.setOrder(FilterRegistrationBean.HIGHEST_PRECEDENCE);
//        Map<String, String> initParameters = new HashMap<String, String>();
//        initParameters.put("excludes", excludes);
//        registration.setInitParameters(initParameters);
//        return registration;
//    }

    @SuppressWarnings({ "rawtypes", "unchecked" })
    @Bean
    @ConditionalOnProperty(value = "xss.enabled", havingValue = "true")
    public FilterRegistrationBean xssFilterRegistration()
    {
        FilterRegistrationBean registration = new FilterRegistrationBean();
        registration.setDispatcherTypes(DispatcherType.REQUEST);
        registration.setFilter(new XssFilter());
        StringUtils.split(urlPatterns,10);
        registration.addUrlPatterns(String.join(",",StringUtils.split(urlPatterns, ",")));
        registration.setName("xssFilter");
        registration.setOrder(FilterRegistrationBean.HIGHEST_PRECEDENCE);
        Map<String, String> initParameters = new HashMap<String, String>();
        initParameters.put("excludes", excludes);
        registration.setInitParameters(initParameters);
        return registration;
    }

    /**
     * 重复请求校验
     * @return
     */
    @SuppressWarnings({ "rawtypes", "unchecked" })
    @Bean
    public FilterRegistrationBean someFilterRegistration()
    {
        FilterRegistrationBean registration = new FilterRegistrationBean();