lsm/sa-token
1
0
Fork 0
mirror of https://gitee.com/dromara/sa-token.git synced 2025-10-21 02:57:23 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

refactor: SaFirewallCheckHookForPathDangerCharacter#dangerCharacter 数据类型更换为 List<String> 以更方便扩展

Browse Source
This commit is contained in:
click33
2025-03-07 23:18:40 +08:00
parent f787d5a375
commit d853d61bf6
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
sa-token-core/src/main/java/cn/dev33/satoken/strategy/hooks/SaFirewallCheckHookForPathDangerCharacter.java
View File

@@ -19,6 +19,10 @@ import cn.dev33.satoken.context.model.SaRequest;
import cn.dev33.satoken.context.model.SaResponse; import cn.dev33.satoken.context.model.SaResponse;
import cn.dev33.satoken.exception.RequestPathInvalidException; import cn.dev33.satoken.exception.RequestPathInvalidException;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.List;
/** /**
* 防火墙策略校验钩子函数：请求 path 危险字符校验 * 防火墙策略校验钩子函数：请求 path 危险字符校验
* *
@@ -35,7 +39,7 @@ public class SaFirewallCheckHookForPathDangerCharacter implements SaFirewallChec
/** /**
* 请求 path 不允许出现的危险字符 * 请求 path 不允许出现的危险字符
*/ */
public String[] dangerCharacter = { public List<String> dangerCharacter = new ArrayList<>(Arrays.asList(
"//", // // "//", // //
"\\", // \ "\\", // \
"%2e", "%2E", // . "%2e", "%2E", // .
@@ -48,14 +52,14 @@ public class SaFirewallCheckHookForPathDangerCharacter implements SaFirewallChec
"\r", "%0d", "%0D", // 回车符 "\r", "%0d", "%0D", // 回车符
"\u2028", // 行分隔符 "\u2028", // 行分隔符
"\u2029" // 段分隔符 "\u2029" // 段分隔符
}; ));
/** /**
* 重载配置 * 重载配置
* @param character 危险字符列表 * @param character 危险字符列表
*/ */
public void resetConfig(String... character) { public void resetConfig(String... character) {
this.dangerCharacter = character; this.dangerCharacter = Arrays.asList(character);
} }
/** /**