From 2c03ed453fda44df3749da3e5abf0b45e2b99221 Mon Sep 17 00:00:00 2001
From: shinnosuke <tantao@1hoper.com>
Date: 星期四, 02 七月 2026 10:43:01 +0800
Subject: [PATCH] 新增了部分v2.0 p1功能
---
ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java | 5 ++++-
1 files changed, 4 insertions(+), 1 deletions(-)
diff --git a/ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java b/ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java
index 72a2e08..f71af8b 100644
--- a/ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java
+++ b/ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java
@@ -46,6 +46,9 @@
@ConditionalOnProperty(value = "security.xss.enabled", havingValue = "true")
public class XssFilter implements GlobalFilter, Ordered {
private static final Logger log = LoggerFactory.getLogger(XssFilter.class);
+ private static final Set<String> RICH_TEXT_URLS = new HashSet<>(Arrays.asList(
+ "/system/faq"
+ ));
// 跨站脚本的 xss 配置，nacos自行添加
@Autowired
private XssProperties xss;
@@ -68,7 +71,7 @@
}
// excludeUrls 不过滤
String url = request.getURI().getPath();
- if (StringUtils.matches(url, xss.getExcludeUrls())) {
+ if (StringUtils.matches(url, xss.getExcludeUrls()) || RICH_TEXT_URLS.contains(url)) {
return chain.filter(exchange);
}
ServerHttpRequestDecorator httpRequestDecorator = requestDecorator(exchange);
--
Gitblit v1.7.1