From 4b827be5c0e4aa2c4168ce0e1ce9a8ab002d2fd9 Mon Sep 17 00:00:00 2001 From: fit2cloud-chenyw Date: Thu, 7 Nov 2024 14:38:12 +0800 Subject: [PATCH] =?UTF-8?q?fix(=E4=BB=AA=E8=A1=A8=E6=9D=BF):=20=E5=88=86?= =?UTF-8?q?=E4=BA=AB=E9=93=BE=E6=8E=A5=E5=B8=A6=E5=AF=86=E7=A0=81=E8=AE=BF?= =?UTF-8?q?=E9=97=AE=E6=8A=A5=E9=94=99=E4=B8=8D=E6=94=AF=E6=8C=81=E5=BD=93?= =?UTF-8?q?=E5=89=8Durl?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../java/io/dataease/share/interceptor/LinkInterceptor.java | 4 ++-- .../visualization/server/VisualizationLinkJumpService.java | 1 + 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/core/core-backend/src/main/java/io/dataease/share/interceptor/LinkInterceptor.java b/core/core-backend/src/main/java/io/dataease/share/interceptor/LinkInterceptor.java index 2188711918..d7cb58c268 100644 --- a/core/core-backend/src/main/java/io/dataease/share/interceptor/LinkInterceptor.java +++ b/core/core-backend/src/main/java/io/dataease/share/interceptor/LinkInterceptor.java @@ -19,7 +19,7 @@ import java.util.List; @Component public class LinkInterceptor implements HandlerInterceptor { - private final static String whiteListText = "/user/ipInfo, /apisix/check, /datasetData/enumValueObj"; + private final static String whiteListText = "/user/ipInfo, /apisix/check, /datasetData/enumValueObj, /dekey, /share/validate"; @Override @@ -40,7 +40,7 @@ public class LinkInterceptor implements HandlerInterceptor { if (StringUtils.startsWith(requestURI, AuthConstant.DE_API_PREFIX)) { requestURI = requestURI.replaceFirst(AuthConstant.DE_API_PREFIX, ""); } - boolean valid = whiteList.contains(requestURI); + boolean valid = whiteList.contains(requestURI) || WhitelistUtils.match(requestURI); if (!valid) { DEException.throwException("分享链接Token不支持访问当前url[" + requestURI + "]"); } diff --git a/core/core-backend/src/main/java/io/dataease/visualization/server/VisualizationLinkJumpService.java b/core/core-backend/src/main/java/io/dataease/visualization/server/VisualizationLinkJumpService.java index 459bec6710..ecd35afbfb 100644 --- a/core/core-backend/src/main/java/io/dataease/visualization/server/VisualizationLinkJumpService.java +++ b/core/core-backend/src/main/java/io/dataease/visualization/server/VisualizationLinkJumpService.java @@ -137,6 +137,7 @@ public class VisualizationLinkJumpService implements VisualizationLinkJumpApi { }); } + @DeLinkPermit("#p0.targetDvId") @Override public VisualizationLinkJumpBaseResponse queryTargetVisualizationJumpInfo(VisualizationLinkJumpBaseRequest request) { List result = extVisualizationLinkJumpMapper.getTargetVisualizationJumpInfo(request);