中危.4.API误用:不安全的框架绑定,缺陷146

whycxzp

2023-10-30 b14918c89bdbfeae0b55e3325216ef557bf5899f

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
package com.whyc.controller;
 
import com.whyc.dto.FBS9100_ComBase;
import com.whyc.dto.Response;
import com.whyc.pojo.Fbs9100sFodParam;
import com.whyc.service.Fbs9100sFodParamService;
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiOperation;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.*;
 
@Api(tags = "在线监测-实时监控")
@RestController
@RequestMapping("Fbs9100s_fod_paramAction")
public class Fbs9100sFodParamController extends BaseController{
 
    @Autowired
    private Fbs9100sFodParamService service;
 
    @ApiOperation("停止养护/除硫")
    @PostMapping("update")
    public Response update(@RequestBody Fbs9100sFodParam fod){
        if(fod.getOpCmd()==FBS9100_ComBase.CMD_ReadFodParam){
           return service.startOrStopTest(fod);//160没有GroupNum
        }else if(fod.getOpCmd()==FBS9100_ComBase.CMD_WriteFodParam){
            return service.update(fod);
        }else if(fod.getOpCmd()==FBS9100_ComBase.CMD_Start_FODCL_test){
            return service.startOrStopTest(fod);
        }else if(fod.getOpCmd()== FBS9100_ComBase.CMD_Start_FODYH_test){
            return service.startOrStopTest(fod);
        }else if(fod.getOpCmd()==FBS9100_ComBase.CMD_Stop_FOD_test){
            return service.startOrStopTest(fod);
        }
        return new Response();
    }
 
    @ApiOperation("从数据库中读取除硫参数")
    @GetMapping("serchByCondition")
    public Response serchByCondition(@RequestParam int devId){
        return  service.serchByCondition(devId);
    }
 
}