Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
N
nouiWithSpringMVC
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
gechengyang
nouiWithSpringMVC
Commits
4e56c07f
Commit
4e56c07f
authored
Oct 10, 2020
by
WeiCong
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
优化安全配置;
修复安全框架多集合,部分集合为空,导致跳转不到具体交易得缺陷
parent
9d8c3302
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
21 additions
and
20 deletions
+21
-20
DataSecurityUtil.java
...java/org/sss/presentation/noui/util/DataSecurityUtil.java
+12
-8
security.properties
src/main/resources/security.properties
+9
-12
No files found.
src/main/java/org/sss/presentation/noui/util/DataSecurityUtil.java
View file @
4e56c07f
...
@@ -150,7 +150,11 @@ public class DataSecurityUtil {
...
@@ -150,7 +150,11 @@ public class DataSecurityUtil {
String
val
=
dataField
.
getValue
().
toString
();
String
val
=
dataField
.
getValue
().
toString
();
checkList
[
index
]=
val
;
checkList
[
index
]=
val
;
}
}
pars
[
i
]=
String
.
join
(
"_"
,
checkList
);
if
(
checkList
.
length
==
0
){
pars
[
i
]=
"_"
;
}
else
{
pars
[
i
]=
String
.
join
(
"_"
,
checkList
);
}
}
else
{
}
else
{
StringBuilder
sb
=
new
StringBuilder
();
StringBuilder
sb
=
new
StringBuilder
();
sb
.
append
(
"安全配置["
).
append
(
configKey
).
append
(
"]对应的待校验字段["
);
sb
.
append
(
"安全配置["
).
append
(
configKey
).
append
(
"]对应的待校验字段["
);
...
@@ -220,7 +224,7 @@ public class DataSecurityUtil {
...
@@ -220,7 +224,7 @@ public class DataSecurityUtil {
return
ERROR_AES_DECODE
;
return
ERROR_AES_DECODE
;
}
}
String
clientEnc
=
preHandle
(
clientpars
);
String
clientEnc
=
preHandle
(
clientpars
);
if
(
serverEnc
.
indexOf
(
"_"
)
>
0
){
if
(
serverEnc
.
indexOf
(
"_"
)
!=
-
1
){
//集合处理
//集合处理
String
[]
parts
=
serverEnc
.
split
(
","
);
String
[]
parts
=
serverEnc
.
split
(
","
);
for
(
String
part:
parts
){
for
(
String
part:
parts
){
...
@@ -270,12 +274,12 @@ public class DataSecurityUtil {
...
@@ -270,12 +274,12 @@ public class DataSecurityUtil {
}
}
List
<
String
>
lst
=
Arrays
.
asList
(
pars
);
List
<
String
>
lst
=
Arrays
.
asList
(
pars
);
String
md5
=
String
.
join
(
","
,
lst
);
String
md5
=
String
.
join
(
","
,
lst
);
if
(
md5
.
startsWith
(
","
)){
//
if(md5.startsWith(",")){
md5
=
md5
.
substring
(
1
,
md5
.
length
());
//
md5=md5.substring(1,md5.length());
}
//
}
if
(
md5
.
endsWith
(
","
)){
//
if(md5.endsWith(",")){
md5
=
md5
.
substring
(
0
,
md5
.
length
()-
1
);
//
md5=md5.substring(0,md5.length()-1);
}
//
}
return
md5
;
return
md5
;
}
}
...
...
src/main/resources/security.properties
View file @
4e56c07f
...
@@ -11,6 +11,7 @@ switch=ON
...
@@ -11,6 +11,7 @@ switch=ON
/bhgrel/
init_decode
=
\\
bhggrp
\\
rec
\\
inr
/bhgrel/
init_decode
=
\\
bhggrp
\\
rec
\\
inr
/bhgrel/
init_encode
=
\\
bhggrp
\\
rec
\\
inr
/bhgrel/
init_encode
=
\\
bhggrp
\\
rec
\\
inr
/bhgrel/
relrow_decode
=
\\
bhggrp
\\
rec
\\
inr
/bhgrel/
relrow_decode
=
\\
bhggrp
\\
rec
\\
inr
/bhgrel/
reprow_decode
=
\\
bhggrp
\\
rec
\\
inr
#共享前置用户管理
#共享前置用户管理
/usrreg/
regsel_encode
=
\\
recp
\\
usrlst[]
\\
inr
/usrreg/
regsel_encode
=
\\
recp
\\
usrlst[]
\\
inr
...
@@ -30,6 +31,7 @@ switch=ON
...
@@ -30,6 +31,7 @@ switch=ON
/urgrel/
init_decode
=
\\
urggrp
\\
rec
\\
inr
/urgrel/
init_decode
=
\\
urggrp
\\
rec
\\
inr
/urgrel/
init_encode
=
\\
urggrp
\\
rec
\\
inr
/urgrel/
init_encode
=
\\
urggrp
\\
rec
\\
inr
/urgrel/
relrow_decode
=
\\
urggrp
\\
rec
\\
inr
/urgrel/
relrow_decode
=
\\
urggrp
\\
rec
\\
inr
/urgrel/
reprow_decode
=
\\
urggrp
\\
rec
\\
inr
#共享前置公告——查询
#共享前置公告——查询
/elsinf/
sel_encode
=
\\
infgrp
\\
inflst[]
\\
inr
/elsinf/
sel_encode
=
\\
infgrp
\\
inflst[]
\\
inr
...
@@ -49,6 +51,7 @@ switch=ON
...
@@ -49,6 +51,7 @@ switch=ON
/dbdbch/
init_encode
=
\\
bchgrp
\\
rec
\\
inr
/dbdbch/
init_encode
=
\\
bchgrp
\\
rec
\\
inr
/dbdbch/
sav_decode
=
\\
bchgrp
\\
rec
\\
inr
/dbdbch/
sav_decode
=
\\
bchgrp
\\
rec
\\
inr
#机构管理——复核
#机构管理——复核
/bchrel/
init_decode
=
\\
bchgrp
\\
rec
\\
inr
/bchrel/
init_encode
=
\\
bchgrp
\\
rec
\\
inr
/bchrel/
init_encode
=
\\
bchgrp
\\
rec
\\
inr
/bchrel/
relrow_decode
=
\\
bchgrp
\\
rec
\\
inr
/bchrel/
relrow_decode
=
\\
bchgrp
\\
rec
\\
inr
...
@@ -59,6 +62,7 @@ switch=ON
...
@@ -59,6 +62,7 @@ switch=ON
/dberol/
init_encode
=
\\
rolgrp
\\
rec
\\
inr
/dberol/
init_encode
=
\\
rolgrp
\\
rec
\\
inr
/dberol/
sav_decode
=
\\
rolgrp
\\
rec
\\
inr
/dberol/
sav_decode
=
\\
rolgrp
\\
rec
\\
inr
#角色管理——删除
#角色管理——删除
/dbdrol/
init_decode
=
\\
rolgrp
\\
rec
\\
inr
/dbdrol/
init_encode
=
\\
rolgrp
\\
rec
\\
inr
/dbdrol/
init_encode
=
\\
rolgrp
\\
rec
\\
inr
/dbdrol/
sav_decode
=
\\
rolgrp
\\
rec
\\
inr
/dbdrol/
sav_decode
=
\\
rolgrp
\\
rec
\\
inr
...
@@ -109,7 +113,7 @@ switch=ON
...
@@ -109,7 +113,7 @@ switch=ON
/bdtrtn/
init_decode
=
\\
bddgrp
\\
rec
\\
inr
/bdtrtn/
init_decode
=
\\
bddgrp
\\
rec
\\
inr
/bdtrtn/
init_encode
=
\\
bddgrp
\\
rec
\\
inr
/bdtrtn/
init_encode
=
\\
bddgrp
\\
rec
\\
inr
/bdtrtn/
sav_decode
=
\\
bddgrp
\\
rec
\\
inr
/bdtrtn/
sav_decode
=
\\
bddgrp
\\
rec
\\
inr
#
退单
#
到期付款
/bdtacc/
init_decode
=
\\
bddgrp
\\
rec
\\
inr
/bdtacc/
init_decode
=
\\
bddgrp
\\
rec
\\
inr
/bdtacc/
init_encode
=
\\
bddgrp
\\
rec
\\
inr
/bdtacc/
init_encode
=
\\
bddgrp
\\
rec
\\
inr
/bdtacc/
sav_decode
=
\\
bddgrp
\\
rec
\\
inr
/bdtacc/
sav_decode
=
\\
bddgrp
\\
rec
\\
inr
...
@@ -144,7 +148,10 @@ switch=ON
...
@@ -144,7 +148,10 @@ switch=ON
/detrej/
init_decode
=
\\
dedgrp
\\
rec
\\
inr
/detrej/
init_decode
=
\\
dedgrp
\\
rec
\\
inr
/detrej/
init_encode
=
\\
dedgrp
\\
rec
\\
inr
/detrej/
init_encode
=
\\
dedgrp
\\
rec
\\
inr
/detrej/
sav_decode
=
\\
dedgrp
\\
rec
\\
inr
/detrej/
sav_decode
=
\\
dedgrp
\\
rec
\\
inr
#备忘录
/diasel/
sel_encode
=
\\
dialst[]
\\
objinr
#主页
/office/
offp_todo_encode
=
\\
offp
\\
todolst[]
\\
objinr
#复核夹
#复核夹
/trnrel/
searow_encode
=
\\
recpan
\\
trnlst[]
\\
inr
/trnrel/
searow_encode
=
\\
recpan
\\
trnlst[]
\\
inr
/trnrel/
init_decode
=
\\
trn
\\
inr
/trnrel/
init_decode
=
\\
trn
\\
inr
...
@@ -152,16 +159,6 @@ switch=ON
...
@@ -152,16 +159,6 @@ switch=ON
/trnrel/
relrow_decode
=
\\
trn
\\
inr
/trnrel/
relrow_decode
=
\\
trn
\\
inr
/trnrel/
reprow_decode
=
\\
trn
\\
inr
/trnrel/
reprow_decode
=
\\
trn
\\
inr
#经办夹
#/sptsel/sel_encode=\\sptp\\lst[]\\objinr
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment