xss 优化

license/src/main/java/iot/sixiang/license/controller/DeviceController.java

@@ -17,6 +17,7 @@ import iot.sixiang.license.model.vo.DeviceDetailVo;
 import iot.sixiang.license.model.vo.DeviceVo;
 import iot.sixiang.license.service.DeviceBlackService;
 import iot.sixiang.license.service.DeviceService;
+import iot.sixiang.license.xss.XssUtil;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.web.bind.WebDataBinder;
 import org.springframework.web.bind.annotation.*;
@@ -84,6 +85,8 @@ public class DeviceController {
     @MyLog(title = "获取设备列表", optParam = "#{pageNo},#{pageSize},#{appName},#{userName}", businessType = BusinessType.SELECT)
     @ApiImplicitParams({@ApiImplicitParam(name = "pageNo", value = "当前在第几页", required = true, dataType = "int"), @ApiImplicitParam(name = "pageSize", value = "每页显示多少页", required = true, dataType = "int"), @ApiImplicitParam(name = "appName", value = "应用名"), @ApiImplicitParam(name = "userName", value = "用户名")})
     public PageResult<DeviceVo> getDeviceList(@RequestParam(value = "pageNo", defaultValue = "0") int pageNo, @RequestParam(value = "pageSize", defaultValue = "0") int pageSize, @RequestParam(value = "appName", required = false) String appName, @RequestParam(value = "userName", required = false) String userName) {
+        appName = XssUtil.checkXSS(appName);
+        userName = XssUtil.checkXSS(userName);
         PageInfoModel<DeviceVo> records = deviceService.getDeviceList(pageNo, pageSize, appName, userName);
         int total = records.getTotal();
         int pages = total / pageSize;//pages为总页数

license/src/main/java/iot/sixiang/license/controller/OperateController.java

@@ -169,6 +169,7 @@ public class OperateController {
     @ApiOperation(value = "删除服务接口", notes = "删除服务")
     @PostMapping("server/delete")
     public BaseResult deleteServer(@RequestParam("serverIp") String serverIp) {
+        serverIp = XssUtil.checkXSS(serverIp);
         boolean res = serverService.deleteServer(serverIp);
         if (res) {
             return BaseResult.success();

license/src/main/java/iot/sixiang/license/controller/UserController.java

@@ -135,6 +135,8 @@ public class UserController {
                                           @RequestParam(value = "pageSize", defaultValue = "0") int pageSize,
                                           @RequestParam(value = "userName", required = false) String userName,
                                           @RequestParam(value = "company", required = false) String company) {
+        userName = XssUtil.checkXSS(userName);
+        company = XssUtil.checkXSS(company);
         PageInfoModel<UserVo> records = userService.getUserList(pageNo, pageSize, userName, company);
         int total = records.getTotal();
         int pages = total / pageSize;//pages为总页数