open-source/file-online-preview
1
0
Fork 0
mirror of https://gitee.com/kekingcn/file-online-preview.git synced 2026-09-13 08:24:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: protect addTask with trust filters

Browse Source
This commit is contained in:
kl
2026-06-24 11:38:40 +08:00
parent 1f60e30f09
commit eb271379fe
2 changed files with 29 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
server/src/main/java/cn/keking/config/WebConfig.java
View File

@@ -46,6 +46,7 @@ public class WebConfig implements WebMvcConfigurer {
filterUri.add("/onlinePreview"); filterUri.add("/onlinePreview");
filterUri.add("/picturesPreview"); filterUri.add("/picturesPreview");
filterUri.add("/getCorsFile"); filterUri.add("/getCorsFile");
filterUri.add("/addTask");
TrustHostFilter filter = new TrustHostFilter(); TrustHostFilter filter = new TrustHostFilter();
FilterRegistrationBean<TrustHostFilter> registrationBean = new FilterRegistrationBean<>(); FilterRegistrationBean<TrustHostFilter> registrationBean = new FilterRegistrationBean<>();
registrationBean.setFilter(filter); registrationBean.setFilter(filter);
@@ -59,6 +60,7 @@ public class WebConfig implements WebMvcConfigurer {
filterUri.add("/onlinePreview"); filterUri.add("/onlinePreview");
filterUri.add("/picturesPreview"); filterUri.add("/picturesPreview");
filterUri.add("/getCorsFile"); filterUri.add("/getCorsFile");
filterUri.add("/addTask");
TrustDirFilter filter = new TrustDirFilter(); TrustDirFilter filter = new TrustDirFilter();
FilterRegistrationBean<TrustDirFilter> registrationBean = new FilterRegistrationBean<>(); FilterRegistrationBean<TrustDirFilter> registrationBean = new FilterRegistrationBean<>();
registrationBean.setFilter(filter); registrationBean.setFilter(filter);

27
server/src/test/java/cn/keking/config/WebConfigTests.java Normal file
View File

@@ -0,0 +1,27 @@
package cn.keking.config;
import cn.keking.web.filter.TrustDirFilter;
import cn.keking.web.filter.TrustHostFilter;
import org.junit.jupiter.api.Test;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import static org.junit.jupiter.api.Assertions.assertTrue;
class WebConfigTests {
private final WebConfig webConfig = new WebConfig();
@Test
void shouldApplyTrustHostFilterToAddTaskEndpoint() {
FilterRegistrationBean<TrustHostFilter> registration = webConfig.getTrustHostFilter();
assertTrue(registration.getUrlPatterns().contains("/addTask"));
}
@Test
void shouldApplyTrustDirFilterToAddTaskEndpoint() {
FilterRegistrationBean<TrustDirFilter> registration = webConfig.getTrustDirFilter();
assertTrue(registration.getUrlPatterns().contains("/addTask"));
}
}