lsd/ks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修改自治区扫描接口漏洞问题

Browse Source
This commit is contained in:
sh
2026-04-30 15:10:34 +08:00
parent 05253c922a
commit 728a5bbb50
3 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/cms/CmsJobController.java
View File

@@ -54,7 +54,7 @@ import java.util.stream.Collectors;
@RestController @RestController
@RequestMapping("/cms/job") @RequestMapping("/cms/job")
@Api(tags = "后台：岗位管理") @Api(tags = "后台：岗位管理")
@Anonymous //@Anonymous
public class CmsJobController extends BaseController public class CmsJobController extends BaseController
{ {
@Autowired @Autowired
@@ -210,6 +210,7 @@ public class CmsJobController extends BaseController
@ApiOperation("获取推荐岗位") @ApiOperation("获取推荐岗位")
@GetMapping("/recommend") @GetMapping("/recommend")
@Anonymous
public AjaxResult recommend(ESJobSearch esJobSearch) public AjaxResult recommend(ESJobSearch esJobSearch)
{ {
if (RoleUtils.isCompanyAdmin()) { if (RoleUtils.isCompanyAdmin()) {

8
ruoyi-common/src/main/java/com/ruoyi/common/constant/EncryptConstants.java
View File

@@ -37,7 +37,11 @@ public class EncryptConstants {
"/app/speech/**", "/app/speech/**",
"/app/job/**", "/app/job/**",
"/app/company/**", "/app/company/**",
"/login", "/app/companycontact/**",
"/app/user/resume" "/app/appskill/**",
"/app/userworkexperiences/**",
"/app/user/**",
"/app/user/resume",
"/cms/job/recommend"
); );
} }

2
ruoyi-common/src/main/java/com/ruoyi/common/filter/RequestWrapperFilter.java
View File

@@ -73,7 +73,7 @@ public class RequestWrapperFilter implements Filter {
String forwardUrl = buildGetRequestURI(httpRequest); String forwardUrl = buildGetRequestURI(httpRequest);
// 先做输入规范化 + 解码，消除编码/格式绕过 // 先做输入规范化 + 解码，消除编码/格式绕过
String normalizedForwardUrl = normalizePath(forwardUrl); // String normalizedForwardUrl = normalizePath(forwardUrl);
// if (normalizedForwardUrl == null) { // if (normalizedForwardUrl == null) {
// log.error("非法内部转发：路径格式异常 {}", LogUtils.cleanLog(forwardUrl)); // log.error("非法内部转发：路径格式异常 {}", LogUtils.cleanLog(forwardUrl));
// httpResponse.sendError(InternalForwardConstants.FORBIDDEN_CODE, InternalForwardConstants.FORBIDDEN_MSG); // httpResponse.sendError(InternalForwardConstants.FORBIDDEN_CODE, InternalForwardConstants.FORBIDDEN_MSG);