diff --git a/src/main/java/im/zhaojun/zfile/module/link/aspect/RefererCheckAspect.java b/src/main/java/im/zhaojun/zfile/module/link/aspect/RefererCheckAspect.java index 94c41c0..c53fef2 100644 --- a/src/main/java/im/zhaojun/zfile/module/link/aspect/RefererCheckAspect.java +++ b/src/main/java/im/zhaojun/zfile/module/link/aspect/RefererCheckAspect.java @@ -86,6 +86,8 @@ public class RefererCheckAspect { log.warn("请求路径 {}, referer 为白名单模式,当前请求 referer {} 未在白名单中,禁止访问.", requestUrl, referer); httpServletResponse.sendRedirect(forbiddenUrl); return null; + } else if (refererAllowEmpty && StrUtil.isEmpty(referer)) { // 如果 referer 允许为空,且当前 referer 为空,则跳过校验 + return point.proceed(); } // 如果是黑名单模式,则校验当前 referer 是否在列表中,则禁止访问.