中危.4.API误用:不安全的框架绑定,缺陷32

whycxzp

2023-10-27 ab28b2ba992f95aa5461de48c1c94f70bd358ae6

 src/main/java/com/whyc/controller/WorkflowActionController.java

@@ -48,7 +48,7 @@
     */
    @GetMapping("actionTypeList4Role")
    @ApiOperation(value = "查询动作列表")
    public Response getActionTypeList(@RequestParam Integer type,@RequestBody Integer status){
    public Response getActionTypeList(@RequestParam Integer type,@RequestParam Integer status){
        int userRole = ActionUtil.getUser().getURole();
        List<WorkflowAction> actionTypeList = service.getActionTypeList(type,status,userRole);
        return new Response<List<WorkflowAction>>().set(1,actionTypeList);