| | |
| | | public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException { |
| | | HttpServletRequest request = (HttpServletRequest) servletRequest; |
| | | HttpServletResponse response = (HttpServletResponse) servletResponse; |
| | | Locale.setDefault(Locale.ENGLISH); |
| | | //Locale.setDefault(Locale.ENGLISH); |
| | | //严格要求 |
| | | if(2 == YamlProperties.systemType) { |
| | | String requestURI = request.getRequestURI(); |
| | |
| | | //paramValue = paramValue.replace(String.valueOf(LDAP_FILTER_ESCAPE_SEQUENCE[charIndex]), LDAP_FILTER_ESCAPE_SEQUENCE_CHARACTER[charIndex]); |
| | | //这个里面是允许*的,可以放过 |
| | | if ( |
| | | (requestURI.contains("user/") && c == '*' && (request.getMethod().toUpperCase().equals(RequestMethod.POST.name()) || request.getMethod().toUpperCase().equals(RequestMethod.PUT.name()))) |
| | | (requestURI.contains("user/") && c == '*' && (request.getMethod().toUpperCase(Locale.ENGLISH).equals(RequestMethod.POST.name()) || request.getMethod().toUpperCase(Locale.ENGLISH).equals(RequestMethod.PUT.name()))) |
| | | ) { |
| | | continue; |
| | | } else if ((requestURI.contains(".servlet") || requestURI.contains("menu/menuList")) && c == '/') { |
| | |
| | | if (index != -1) { |
| | | //这个里面是允许*的,可以放过 |
| | | if ( |
| | | (requestURI.contains("user/") && c == '*' && (request.getMethod().toUpperCase().equals(RequestMethod.POST.name()) || request.getMethod().toUpperCase().equals(RequestMethod.PUT.name()))) |
| | | (requestURI.contains("user/") && c == '*' && (request.getMethod().toUpperCase(Locale.ENGLISH).equals(RequestMethod.POST.name()) || request.getMethod().toUpperCase(Locale.ENGLISH).equals(RequestMethod.PUT.name()))) |
| | | |
| | | ) { |
| | | continue; |