自定义xss校验注解实现
This commit is contained in:
		| @@ -5,6 +5,7 @@ import javax.validation.constraints.Size; | ||||
| import org.apache.commons.lang3.builder.ToStringBuilder; | ||||
| import org.apache.commons.lang3.builder.ToStringStyle; | ||||
| import com.ruoyi.common.core.domain.BaseEntity; | ||||
| import com.ruoyi.common.xss.Xss; | ||||
|  | ||||
| /** | ||||
|  * 通知公告表 sys_notice | ||||
| @@ -45,6 +46,7 @@ public class SysNotice extends BaseEntity | ||||
|         this.noticeTitle = noticeTitle; | ||||
|     } | ||||
|  | ||||
|     @Xss(message = "公告标题不能包含脚本字符") | ||||
|     @NotBlank(message = "公告标题不能为空") | ||||
|     @Size(min = 0, max = 50, message = "公告标题不能超过50个字符") | ||||
|     public String getNoticeTitle() | ||||
|   | ||||
| @@ -3,6 +3,7 @@ package com.ruoyi.system.service.impl; | ||||
| import java.util.ArrayList; | ||||
| import java.util.List; | ||||
| import java.util.stream.Collectors; | ||||
| import javax.validation.Validator; | ||||
| import org.slf4j.Logger; | ||||
| import org.slf4j.LoggerFactory; | ||||
| import org.springframework.beans.factory.annotation.Autowired; | ||||
| @@ -16,6 +17,7 @@ import com.ruoyi.common.core.domain.entity.SysUser; | ||||
| import com.ruoyi.common.exception.ServiceException; | ||||
| import com.ruoyi.common.utils.SecurityUtils; | ||||
| import com.ruoyi.common.utils.StringUtils; | ||||
| import com.ruoyi.common.utils.bean.BeanValidators; | ||||
| import com.ruoyi.common.utils.spring.SpringUtils; | ||||
| import com.ruoyi.system.domain.SysPost; | ||||
| import com.ruoyi.system.domain.SysUserPost; | ||||
| @@ -56,6 +58,9 @@ public class SysUserServiceImpl implements ISysUserService | ||||
|     @Autowired | ||||
|     private ISysConfigService configService; | ||||
|  | ||||
|     @Autowired | ||||
|     protected Validator validator; | ||||
|  | ||||
|     /** | ||||
|      * 根据条件分页查询用户列表 | ||||
|      *  | ||||
| @@ -513,6 +518,7 @@ public class SysUserServiceImpl implements ISysUserService | ||||
|                 SysUser u = userMapper.selectUserByUserName(user.getUserName()); | ||||
|                 if (StringUtils.isNull(u)) | ||||
|                 { | ||||
|                     BeanValidators.validateWithException(validator, user); | ||||
|                     user.setPassword(SecurityUtils.encryptPassword(password)); | ||||
|                     user.setCreateBy(operName); | ||||
|                     this.insertUser(user); | ||||
| @@ -521,6 +527,7 @@ public class SysUserServiceImpl implements ISysUserService | ||||
|                 } | ||||
|                 else if (isUpdateSupport) | ||||
|                 { | ||||
|                     BeanValidators.validateWithException(validator, user); | ||||
|                     user.setUpdateBy(operName); | ||||
|                     this.updateUser(user); | ||||
|                     successNum++; | ||||
|   | ||||
		Reference in New Issue
	
	Block a user