|
|
|
|
@ -42,13 +42,13 @@ public class YudaoXssAutoConfiguration implements WebMvcConfigurer {
|
|
|
|
|
*/
|
|
|
|
|
@Bean
|
|
|
|
|
@ConditionalOnMissingBean(name = "xssJacksonCustomizer")
|
|
|
|
|
@ConditionalOnBean(ObjectMapper.class)
|
|
|
|
|
@ConditionalOnProperty(value = "yudao.xss.enable", havingValue = "true")
|
|
|
|
|
public Jackson2ObjectMapperBuilderCustomizer xssJacksonCustomizer(XssProperties properties,
|
|
|
|
|
PathMatcher pathMatcher,
|
|
|
|
|
XssCleaner xssCleaner) {
|
|
|
|
|
// 在反序列化时进行 xss 过滤,可以替换使用 XssStringJsonSerializer,在序列化时进行处理
|
|
|
|
|
return builder -> builder.deserializerByType(String.class, new XssStringJsonDeserializer(properties, pathMatcher, xssCleaner));
|
|
|
|
|
return builder ->
|
|
|
|
|
builder.deserializerByType(String.class, new XssStringJsonDeserializer(properties, pathMatcher, xssCleaner));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
|