Compare commits

...

4 Commits

Author SHA1 Message Date
twelvet 13ffdc97b3
Pre Merge pull request !281 from twelvet/N/A 2025-03-10 03:45:45 +00:00
若依 a6bcebb62b
!397 修复actuator暴漏问题
Merge pull request !397 from 威士忌的纯度/N/A
2025-03-10 03:45:34 +00:00
威士忌的纯度 1cb262daa3
修复actuator暴漏问题
Signed-off-by: 威士忌的纯度 <whr888888@vip.qq.com>
2025-03-07 10:22:52 +00:00
twelvet feb2aa8ffc
兼容SpringQueryMap,移除params
Signed-off-by: twelvet <2471835953@qq.com>
2022-11-07 09:36:43 +00:00
2 changed files with 23 additions and 1 deletions

View File

@ -29,7 +29,7 @@ http {
}
# 避免actuator暴露
if ($request_uri ~ "/actuator") {
if ($uri ~ "/actuator") {
return 403;
}

View File

@ -1,7 +1,12 @@
package com.ruoyi.common.security.feign;
import java.io.UnsupportedEncodingException;
import java.net.URLDecoder;
import java.util.Collection;
import java.util.Map;
import javax.servlet.http.HttpServletRequest;
import com.ruoyi.common.core.exception.base.BaseException;
import org.springframework.stereotype.Component;
import com.ruoyi.common.core.constant.SecurityConstants;
import com.ruoyi.common.core.utils.ServletUtils;
@ -22,6 +27,23 @@ public class FeignRequestInterceptor implements RequestInterceptor
public void apply(RequestTemplate requestTemplate)
{
HttpServletRequest httpServletRequest = ServletUtils.getRequest();
// 兼容SpringQueryMap移除params
Map<String, Collection<String>> queries = requestTemplate.queries();
Collection<String> params = queries.get("params");
if (params != null) {
for (String param : params) {
try {
String encode = URLDecoder.decode(param, "UTF-8");
if (encode.equals("{}")) {
requestTemplate.query("params");
}
} catch (UnsupportedEncodingException e) {
throw new BaseException("feign过滤字符失败");
}
}
}
if (StringUtils.isNotNull(httpServletRequest))
{
Map<String, String> headers = ServletUtils.getHeaders(httpServletRequest);