修复combo属性过多sheet出现的异常问题

RuoYi

2025-11-13 6aecd35a4ff01c2811e3bc9aaf55a8f566e2ca10

 ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java

@@ -7,10 +7,13 @@
import org.springframework.cloud.gateway.filter.GlobalFilter;

import org.springframework.core.Ordered;

import org.springframework.core.io.buffer.DataBuffer;

import org.springframework.core.io.buffer.DataBufferFactory;

import org.springframework.core.io.buffer.DataBufferUtils;

import org.springframework.core.io.buffer.DefaultDataBufferFactory;

import org.springframework.core.io.buffer.NettyDataBufferFactory;

import org.springframework.http.HttpHeaders;

import org.springframework.http.HttpMethod;

import org.springframework.http.MediaType;

import org.springframework.http.server.reactive.ServerHttpRequest;

import org.springframework.http.server.reactive.ServerHttpRequestDecorator;

import org.springframework.stereotype.Component;

@@ -39,9 +42,19 @@
    public Mono<Void> filter(ServerWebExchange exchange, GatewayFilterChain chain)

    {

        ServerHttpRequest request = exchange.getRequest();

        // xss开关未开启 或 通过nacos关闭，不过滤

        if (!xss.getEnabled())

        {

            return chain.filter(exchange);

        }

        // GET DELETE 不过滤

        HttpMethod method = request.getMethod();

        if (method == null || method.matches("GET") || method.matches("DELETE"))

        if (method == null || method == HttpMethod.GET || method == HttpMethod.DELETE)

        {

            return chain.filter(exchange);

        }

        // 非json类型，不过滤

        if (!isJsonRequest(exchange))

        {

            return chain.filter(exchange);

        }

@@ -64,15 +77,17 @@
            public Flux<DataBuffer> getBody()

            {

                Flux<DataBuffer> body = super.getBody();

                return body.map(dataBuffer -> {

                    byte[] content = new byte[dataBuffer.readableByteCount()];

                    dataBuffer.read(content);

                    DataBufferUtils.release(dataBuffer);

                return body.buffer().map(dataBuffers -> {

                    DataBufferFactory dataBufferFactory = new DefaultDataBufferFactory();

                    DataBuffer join = dataBufferFactory.join(dataBuffers);

                    byte[] content = new byte[join.readableByteCount()];

                    join.read(content);

                    DataBufferUtils.release(join);

                    String bodyStr = new String(content, StandardCharsets.UTF_8);

                    // 防xss攻击过滤

                    bodyStr = EscapeUtil.clean(bodyStr);

                    // 转成字节

                    byte[] bytes = bodyStr.getBytes();

                    byte[] bytes = bodyStr.getBytes(StandardCharsets.UTF_8);

                    NettyDataBufferFactory nettyDataBufferFactory = new NettyDataBufferFactory(ByteBufAllocator.DEFAULT);

                    DataBuffer buffer = nettyDataBufferFactory.allocateBuffer(bytes.length);

                    buffer.write(bytes);

@@ -95,6 +110,17 @@
        return serverHttpRequestDecorator;

    }



    /**

     * 是否是Json请求

     * 
     * @param exchange HTTP请求

     */

    public boolean isJsonRequest(ServerWebExchange exchange)

    {

        String header = exchange.getRequest().getHeaders().getFirst(HttpHeaders.CONTENT_TYPE);

        return StringUtils.startsWithIgnoreCase(header, MediaType.APPLICATION_JSON_VALUE);

    }



    @Override

    public int getOrder()

    {