不安全的框架绑定

2dc6eb0f · AfirSraftGarrier · a1e6982e · 2dc6eb0f
Commit 2dc6eb0f authored Jul 15, 2022 by AfirSraftGarrier
Show whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

EncryptController.java ...ava/iot/sixiang/license/controller/EncryptController.java +5 -0

No files found.
--- a/license/src/main/java/iot/sixiang/license/controller/EncryptController.java
+++ b/license/src/main/java/iot/sixiang/license/controller/EncryptController.java
@@ -31,6 +31,11 @@ public class EncryptController {
    @Value("${other.sm4-key}")
    private String sm4Key;

+    @InitBinder
+    public void initBinder(WebDataBinder binder) {
+        binder.setDisallowedFields(new String[]{"adminCome"});
+    }
+
    @ApiOperation(value = "数据加密")
    @PostMapping("/encrypt")
    public ResResult<EncryptVo> encrypt(@RequestBody EncryptVo encryptVo) {