From 728a5bbb501e54efafd027398ae89cf130ccdd2c Mon Sep 17 00:00:00 2001 From: sh Date: Thu, 30 Apr 2026 15:10:34 +0800 Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E6=94=B9=E8=87=AA=E6=B2=BB=E5=8C=BA?= =?UTF-8?q?=E6=89=AB=E6=8F=8F=E6=8E=A5=E5=8F=A3=E6=BC=8F=E6=B4=9E=E9=97=AE?= =?UTF-8?q?=E9=A2=98?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../com/ruoyi/cms/controller/cms/CmsJobController.java | 3 ++- .../java/com/ruoyi/common/constant/EncryptConstants.java | 8 ++++++-- .../com/ruoyi/common/filter/RequestWrapperFilter.java | 2 +- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/cms/CmsJobController.java b/ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/cms/CmsJobController.java index f6e5c4e..a2af74b 100644 --- a/ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/cms/CmsJobController.java +++ b/ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/cms/CmsJobController.java @@ -54,7 +54,7 @@ import java.util.stream.Collectors; @RestController @RequestMapping("/cms/job") @Api(tags = "后台:岗位管理") -@Anonymous +//@Anonymous public class CmsJobController extends BaseController { @Autowired @@ -210,6 +210,7 @@ public class CmsJobController extends BaseController @ApiOperation("获取推荐岗位") @GetMapping("/recommend") + @Anonymous public AjaxResult recommend(ESJobSearch esJobSearch) { if (RoleUtils.isCompanyAdmin()) { diff --git a/ruoyi-common/src/main/java/com/ruoyi/common/constant/EncryptConstants.java b/ruoyi-common/src/main/java/com/ruoyi/common/constant/EncryptConstants.java index e524719..ca8ef7c 100644 --- a/ruoyi-common/src/main/java/com/ruoyi/common/constant/EncryptConstants.java +++ b/ruoyi-common/src/main/java/com/ruoyi/common/constant/EncryptConstants.java @@ -37,7 +37,11 @@ public class EncryptConstants { "/app/speech/**", "/app/job/**", "/app/company/**", - "/login", - "/app/user/resume" + "/app/companycontact/**", + "/app/appskill/**", + "/app/userworkexperiences/**", + "/app/user/**", + "/app/user/resume", + "/cms/job/recommend" ); } \ No newline at end of file diff --git a/ruoyi-common/src/main/java/com/ruoyi/common/filter/RequestWrapperFilter.java b/ruoyi-common/src/main/java/com/ruoyi/common/filter/RequestWrapperFilter.java index 9dd6d4e..20fdea4 100644 --- a/ruoyi-common/src/main/java/com/ruoyi/common/filter/RequestWrapperFilter.java +++ b/ruoyi-common/src/main/java/com/ruoyi/common/filter/RequestWrapperFilter.java @@ -73,7 +73,7 @@ public class RequestWrapperFilter implements Filter { String forwardUrl = buildGetRequestURI(httpRequest); // 先做输入规范化 + 解码,消除编码/格式绕过 - String normalizedForwardUrl = normalizePath(forwardUrl); +// String normalizedForwardUrl = normalizePath(forwardUrl); // if (normalizedForwardUrl == null) { // log.error("非法内部转发:路径格式异常 {}", LogUtils.cleanLog(forwardUrl)); // httpResponse.sendError(InternalForwardConstants.FORBIDDEN_CODE, InternalForwardConstants.FORBIDDEN_MSG);