IpUtils工具,清除Xss特殊字符,防止Xff注入攻击
This commit is contained in:
		| @@ -40,7 +40,7 @@ public class IpUtils | ||||
|         { | ||||
|             ip = request.getRemoteAddr(); | ||||
|         } | ||||
|  | ||||
|         ip = EscapeUtil.clean(ip);//清除Xss特殊字符 | ||||
|         return "0:0:0:0:0:0:0:1".equals(ip) ? "127.0.0.1" : ip; | ||||
|     } | ||||
|  | ||||
|   | ||||
		Reference in New Issue
	
	Block a user