IpUtils工具，清除Xss特殊字符，防止Xff注入攻击

2020-06-08 15:20:16 +08:00 · 2020-06-08 15:20:16 +08:00 · ba77de6d04
commit ba77de6d04
parent 9d90ee7907
1 changed files with 1 additions and 1 deletions
--- a/ruoyi/src/main/java/com/ruoyi/common/utils/ip/IpUtils.java
+++ b/ruoyi/src/main/java/com/ruoyi/common/utils/ip/IpUtils.java
@ -40,7 +40,7 @@ public class IpUtils
        {
            ip = request.getRemoteAddr();
        }
-
+        ip = EscapeUtil.clean(ip);//清除Xss特殊字符
        return "0:0:0:0:0:0:0:1".equals(ip) ? "127.0.0.1" : ip;
    }