From b19111b9bffe99f65ac08a85d40bb2f186dd264a Mon Sep 17 00:00:00 2001 From: 疯狂的狮子Li <15040126243@163.com> Date: 星期三, 18 八月 2021 11:11:04 +0800 Subject: [PATCH] Merge branch 'master' of gitee.com:JavaLionLi/RuoYi-Vue-Plus into dev --- ruoyi-common/src/main/java/com/ruoyi/common/filter/XssHttpServletRequestWrapper.java | 12 +++++++----- 1 files changed, 7 insertions(+), 5 deletions(-) diff --git a/ruoyi-common/src/main/java/com/ruoyi/common/filter/XssHttpServletRequestWrapper.java b/ruoyi-common/src/main/java/com/ruoyi/common/filter/XssHttpServletRequestWrapper.java index 8561407..700a88d 100644 --- a/ruoyi-common/src/main/java/com/ruoyi/common/filter/XssHttpServletRequestWrapper.java +++ b/ruoyi-common/src/main/java/com/ruoyi/common/filter/XssHttpServletRequestWrapper.java @@ -1,8 +1,8 @@ package com.ruoyi.common.filter; -import cn.hutool.core.lang.Validator; +import cn.hutool.core.io.IoUtil; import cn.hutool.http.HtmlUtil; -import org.apache.commons.io.IOUtils; +import com.ruoyi.common.utils.StringUtils; import org.springframework.http.HttpHeaders; import org.springframework.http.MediaType; @@ -12,6 +12,7 @@ import javax.servlet.http.HttpServletRequestWrapper; import java.io.ByteArrayInputStream; import java.io.IOException; +import java.nio.charset.StandardCharsets; /** * XSS杩囨护澶勭悊 @@ -56,15 +57,16 @@ } // 涓虹┖锛岀洿鎺ヨ繑鍥� - String json = IOUtils.toString(super.getInputStream(), "utf-8"); - if (Validator.isEmpty(json)) + String json = IoUtil.read(super.getInputStream(), StandardCharsets.UTF_8); + if (StringUtils.isEmpty(json)) { return super.getInputStream(); } // xss杩囨护 json = HtmlUtil.cleanHtmlTag(json).trim(); - final ByteArrayInputStream bis = new ByteArrayInputStream(json.getBytes("utf-8")); + + final ByteArrayInputStream bis = IoUtil.toStream(json, StandardCharsets.UTF_8); return new ServletInputStream() { @Override -- Gitblit v1.9.3