修复漏洞(对报错信息进行自定义,避免泄露系统敏感信息)

This commit is contained in:
sh
2026-04-29 17:12:04 +08:00
parent 6b7d16c400
commit 106c1a0b6f
7 changed files with 58 additions and 8 deletions

View File

@@ -38,6 +38,9 @@ public class AppSkillController extends BaseController {
@ApiOperation("获取技能列表")
@GetMapping("/list")
public TableDataInfo list(AppSkill appSkill){
if(appSkill.getUserId()==null){
return error(400,"无效的用户id!");
}
startPage();
List<AppSkill> list=appSkillService.getList(appSkill);
return getDataTable(list);

View File

@@ -43,6 +43,9 @@ public class CmsSkillController extends BaseController {
@ApiOperation("获取技能列表")
@GetMapping("/list")
public TableDataInfo list(AppSkill appSkill){
if(appSkill.getUserId()==null){
return error(400,"无效的用户id!");
}
startPage();
List<AppSkill> list=appSkillService.getList(appSkill);
return getDataTable(list);

View File

@@ -37,6 +37,9 @@ public class EmployeeConfirmController extends BaseController {
// @PreAuthorize("@ss.hasPermi('cms:employeeConfirm:list')")
@RequestMapping("/list")
public TableDataInfo list(EmployeeConfirm employeeConfirm){
if(employeeConfirm.getCompanyId()==null){
return error(400,"无效的企业id!");
}
List<EmployeeConfirm> list=employeeConfirmService.getEmployeeConfirmList(employeeConfirm);
return getDataTable(list);
}

View File

@@ -229,7 +229,7 @@ public class StringUtil {
* @param request
* @return
*/
private static String getProxyServer(HttpServletRequest request) {
public static String getProxyServer(HttpServletRequest request) {
if (request == null) {
return null;
}