!286 此处修改曾导致 nacos修改xss开关时,spring容器未重启,filter仍起效。故增加参数判断,参数刷新后,xss开关正常关闭。

Merge pull request !286 from ylwang/N/A
pull/241/MERGE
若依 2 years ago committed by Gitee
commit f646bfc0f5
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F

@ -42,6 +42,10 @@ public class XssFilter implements GlobalFilter, Ordered
public Mono<Void> filter(ServerWebExchange exchange, GatewayFilterChain chain)
{
ServerHttpRequest request = exchange.getRequest();
// xss开关未开启 或 通过nacos关闭不过滤
if(!xss.getEnabled()){
return chain.filter(exchange);
}
// GET DELETE 不过滤
HttpMethod method = request.getMethod();
if (method == null || method == HttpMethod.GET || method == HttpMethod.DELETE)

Loading…
Cancel
Save