From dc24ed81b8122fd92a1665219f73d1fb53070f85 Mon Sep 17 00:00:00 2001
From: RuoYi <yzz_ivy@163.com>
Date: Sat, 18 Mar 2023 10:41:33 +0800
Subject: [PATCH] 修复用户多角色数据权限可能出现权限抬升的情况
---
ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java | 3 ++-
1 files changed, 2 insertions(+), 1 deletions(-)
diff --git a/ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java b/ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java
index 76792ee..66e8d40 100644
--- a/ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java
+++ b/ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java
@@ -43,7 +43,8 @@
{
ServerHttpRequest request = exchange.getRequest();
// xss开关未开启 或 通过nacos关闭，不过滤
- if(!xss.getEnabled()){
+ if (!xss.getEnabled())
+ {
return chain.filter(exchange);
}
// GET DELETE 不过滤
--
Gitblit v1.9.3