Browse Source

queryAlertForwardConfigByAlarmTmplIds接口referer问题

jwy
review512jwy@163.com 1 month ago
parent
commit
3129b24925
  1. 2
      data-center-business-controller/src/main/java/com/techsor/datacenter/business/configurator/CrosXssFilter.java

2
data-center-business-controller/src/main/java/com/techsor/datacenter/business/configurator/CrosXssFilter.java

@ -53,7 +53,7 @@ public class CrosXssFilter implements Filter {
String requestUri = httpRequest.getRequestURI();
// 当 URL 不包含 /common/ 时,校验 Referer
// if (!requestUri.contains("/common/") && !requestUri.contains("swagger")) {
if (!requestUri.contains("/swagger") && !requestUri.contains("/api-docs")
if (!requestUri.contains("/swagger") && !requestUri.contains("/api-docs") && !requestUri.contains("/queryAlertForwardConfigByAlarmTmplIds")
&& !requestUri.contains("websocket")) {
String referer = httpRequest.getHeader("Referer");
if (StringUtils.isNotBlank(referer)){

Loading…
Cancel
Save