Ver código fonte

为报表模版内容提交保存添加转义功能,以防在某些项目中因添加XSS过滤获取内容错误的问题出现

master
youseries 6 anos atrás
pai
commit
9b69c6ee57
  1. 1
      ureport2-console/src/main/java/com/bstek/ureport/console/designer/DesignerServletAction.java
  2. 4
      ureport2-console/src/main/resources/ureport-asserts/js/designer.bundle.js
  3. 2
      ureport2-console/src/main/resources/ureport-asserts/js/preview.bundle.js
  4. 1
      ureport2-js/src/Utils.js

1
ureport2-console/src/main/java/com/bstek/ureport/console/designer/DesignerServletAction.java

@ -165,6 +165,7 @@ public class DesignerServletAction extends RenderPageServletAction {
String file=req.getParameter("file");
file=ReportUtils.decodeFileName(file);
String content=req.getParameter("content");
content=decode(content);
ReportProvider targetReportProvider=null;
for(ReportProvider provider:reportProviders){
if(file.startsWith(provider.getPrefix())){

4
ureport2-console/src/main/resources/ureport-asserts/js/designer.bundle.js

File diff suppressed because one or more lines are too long

2
ureport2-console/src/main/resources/ureport-asserts/js/preview.bundle.js

File diff suppressed because one or more lines are too long

1
ureport2-js/src/Utils.js

@ -518,6 +518,7 @@ export function tableToXml(context){
xml+=context.reportDef.searchFormXml;
}
xml+=`</ureport>`;
xml=encodeURI(xml);
return xml;
};

Carregando…
Cancelar
Salvar