center/dataease-dm
center/dataease-dm
13
0
Fork 0
forked from github/dataease
Code Pull Requests Activity

fix(系统设置): 地图设置-地理信息不安全路径操作

Browse Source
This commit is contained in:
fit2cloud-chenyw 2024-03-27 15:39:43 +08:00
parent 7f337da714
commit 8d5318e661
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
core/core-backend/src/main/java/io/dataease/map/manage/MapManage.java
View File

@ -109,6 +109,7 @@ public class MapManage {
@CacheEvict(cacheNames = WORLD_MAP_CACHE, key = "'world_map'") @CacheEvict(cacheNames = WORLD_MAP_CACHE, key = "'world_map'")
@Transactional @Transactional
public void saveMapGeo(GeometryNodeCreator request, MultipartFile file) { public void saveMapGeo(GeometryNodeCreator request, MultipartFile file) {
validateCode(request.getCode());
if (ObjectUtils.isEmpty(file) || file.isEmpty()) { if (ObjectUtils.isEmpty(file) || file.isEmpty()) {
DEException.throwException("geometry file is require"); DEException.throwException("geometry file is require");
} }
@ -154,6 +155,7 @@ public class MapManage {
@CacheEvict(cacheNames = WORLD_MAP_CACHE, key = "'world_map'") @CacheEvict(cacheNames = WORLD_MAP_CACHE, key = "'world_map'")
@Transactional @Transactional
public void deleteGeo(String code) { public void deleteGeo(String code) {
validateCode(code);
if (!StringUtils.startsWith(code, GEO_PREFIX)) { if (!StringUtils.startsWith(code, GEO_PREFIX)) {
DEException.throwException("内置Geometry，禁止删除"); DEException.throwException("内置Geometry，禁止删除");
} }
@ -209,5 +211,20 @@ public class MapManage {
return code.substring(0, 3); return code.substring(0, 3);
} }
public void validateCode(String code) {
if (StringUtils.isBlank(code)) DEException.throwException("区域编码不能为空");
String busiGeoCode = getBusiGeoCode(code);
if (!isNumeric(busiGeoCode)) {
DEException.throwException("有效区域编码只能是数字");
}
}
public boolean isNumeric(String str) {
for (int i = str.length(); --i >= 0; ) {
int chr = str.charAt(i);
if (chr < 48 || chr > 57)
return false;
}
return true;
}
} }