renun/zfile
1
0
Fork 0
mirror of https://github.com/zfile-dev/zfile.git synced 2025-04-19 05:34:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

🐛 修复 referer 防盗链允许为空时，仍然去黑/白名单校验的 bug

Browse Source
This commit is contained in:
zhaojun
2022-11-26 18:10:04 +08:00
parent 38161f96e1
commit 4a94c879b8
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/main/java/im/zhaojun/zfile/module/link/aspect/RefererCheckAspect.java
View File

@@ -75,6 +75,8 @@ public class RefererCheckAspect {
log.warn("请求路径 {}, referer 不允许为空，当前请求 referer 为空，禁止访问.", requestUrl);
httpServletResponse.sendRedirect(forbiddenUrl);
return null;
} else if (refererAllowEmpty && StrUtil.isEmpty(referer)) { // 如果 referer 允许为空，且当前 referer 为空，则跳过校验
return point.proceed();
}
// 获取允许的 referer 地址
@@ -86,8 +88,6 @@ public class RefererCheckAspect {
log.warn("请求路径 {}, referer 为白名单模式，当前请求 referer {} 未在白名单中，禁止访问.", requestUrl, referer);
httpServletResponse.sendRedirect(forbiddenUrl);
return null;
} else if (refererAllowEmpty && StrUtil.isEmpty(referer)) { // 如果 referer 允许为空，且当前 referer 为空，则跳过校验
return point.proceed();
}
// 如果是黑名单模式，则校验当前 referer 是否在列表中，则禁止访问.