作者 疯狂的狮子Li
提交者 Gitee

update 优化魔法值

@@ -10,6 +10,7 @@ import javax.servlet.ServletResponse; @@ -10,6 +10,7 @@ import javax.servlet.ServletResponse;
10 import javax.servlet.http.HttpServletRequest; 10 import javax.servlet.http.HttpServletRequest;
11 import javax.servlet.http.HttpServletRequestWrapper; 11 import javax.servlet.http.HttpServletRequestWrapper;
12 import com.ruoyi.common.utils.http.HttpHelper; 12 import com.ruoyi.common.utils.http.HttpHelper;
  13 +import com.ruoyi.common.constant.Constants;
13 14
14 /** 15 /**
15 * 构建可重复读取inputStream的request 16 * 构建可重复读取inputStream的request
@@ -23,10 +24,10 @@ public class RepeatedlyRequestWrapper extends HttpServletRequestWrapper @@ -23,10 +24,10 @@ public class RepeatedlyRequestWrapper extends HttpServletRequestWrapper
23 public RepeatedlyRequestWrapper(HttpServletRequest request, ServletResponse response) throws IOException 24 public RepeatedlyRequestWrapper(HttpServletRequest request, ServletResponse response) throws IOException
24 { 25 {
25 super(request); 26 super(request);
26 - request.setCharacterEncoding("UTF-8");  
27 - response.setCharacterEncoding("UTF-8"); 27 + request.setCharacterEncoding(Constants.UTF8);
  28 + response.setCharacterEncoding(Constants.UTF8);
28 29
29 - body = HttpHelper.getBodyString(request).getBytes("UTF-8"); 30 + body = HttpHelper.getBodyString(request).getBytes(Constants.UTF8);
30 } 31 }
31 32
32 @Override 33 @Override
@@ -12,6 +12,7 @@ import javax.servlet.ServletResponse; @@ -12,6 +12,7 @@ import javax.servlet.ServletResponse;
12 import javax.servlet.http.HttpServletRequest; 12 import javax.servlet.http.HttpServletRequest;
13 import javax.servlet.http.HttpServletResponse; 13 import javax.servlet.http.HttpServletResponse;
14 import com.ruoyi.common.utils.StringUtils; 14 import com.ruoyi.common.utils.StringUtils;
  15 +import com.ruoyi.common.enums.HttpMethod;
15 16
16 /** 17 /**
17 * 防止XSS攻击的过滤器 18 * 防止XSS攻击的过滤器
@@ -59,7 +60,7 @@ public class XssFilter implements Filter @@ -59,7 +60,7 @@ public class XssFilter implements Filter
59 String url = request.getServletPath(); 60 String url = request.getServletPath();
60 String method = request.getMethod(); 61 String method = request.getMethod();
61 // GET DELETE 不过滤 62 // GET DELETE 不过滤
62 - if (method == null || method.matches("GET") || method.matches("DELETE")) 63 + if (method == null || HttpMethod.GET.matches(method) || HttpMethod.DELETE.matches(method))
63 { 64 {
64 return true; 65 return true;
65 } 66 }