From 7b699e08fc891bdac574173bdc38a4d55aa3d59b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=AB=98=E9=9B=84?= <admin@cxcp.com>
Date: Mon, 10 Apr 2023 09:35:15 +0000
Subject: [PATCH] =?UTF-8?q?=E6=96=B0=E5=A2=9E=E5=A4=87=E6=A1=88=E4=BF=A1?=
 =?UTF-8?q?=E6=81=AF,=E7=A6=81=E6=AD=A2=E4=B8=8A=E4=BC=A0=E7=B1=BB?=
 =?UTF-8?q?=E5=9E=8B,=E5=88=A0=E9=99=A4=E6=94=AF=E6=8C=81=E5=AF=86?=
 =?UTF-8?q?=E7=A0=81=E5=8A=9F=E8=83=BD=20=E6=96=B0=E5=A2=9E=E5=A4=87?=
 =?UTF-8?q?=E6=A1=88=E4=BF=A1=E6=81=AF,=E7=A6=81=E6=AD=A2=E4=B8=8A?=
 =?UTF-8?q?=E4=BC=A0=E7=B1=BB=E5=9E=8B,=E5=88=A0=E9=99=A4=E6=94=AF?=
 =?UTF-8?q?=E6=8C=81=E5=AF=86=E7=A0=81=E5=8A=9F=E8=83=BD?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: 高雄 <admin@cxcp.com>
---
 server/src/main/java/cn/keking/utils/DownloadUtils.java | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/server/src/main/java/cn/keking/utils/DownloadUtils.java b/server/src/main/java/cn/keking/utils/DownloadUtils.java
index c4a17383..69c08b17 100644
--- a/server/src/main/java/cn/keking/utils/DownloadUtils.java
+++ b/server/src/main/java/cn/keking/utils/DownloadUtils.java
@@ -49,6 +49,12 @@ public class DownloadUtils {
             logger.error("忽略SSL证书异常:", e);
         }
         ReturnResponse<String> response = new ReturnResponse<>(0, "下载成功!!!", "");
+        if (!KkFileUtils.isAllowedUpload(fileName)) {
+            response.setCode(1);
+            response.setContent(null);
+            response.setMsg("下载失败:不支持的类型!" + urlStr);
+            return response;
+        }
         assert urlStr != null;
         if (urlStr.contains("?fileKey=")) {
             response.setContent(fileDir + urlStrr);