Skip to content

Y
yd-backend
Commit 95319cea by Simon Cheng
Options

安全scan问题

parent a148a4ea
Showing with 219 additions and 1 deletions
yd-api/src/main/java/com/yd/api/AppErrorController.java 0 → 100644
package com.yd.api;
import java.io.IOException;
import java.util.Map;
import javax.servlet.RequestDispatcher;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.autoconfigure.web.ErrorAttributes;
import org.springframework.boot.autoconfigure.web.ErrorController;
import org.springframework.http.HttpStatus;
import org.springframework.http.ResponseEntity;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.ResponseBody;
import org.springframework.web.context.request.RequestAttributes;
import org.springframework.web.context.request.ServletRequestAttributes;
import com.yd.api.result.CommonResult;
import com.yd.api.result.ErrorResponseVO;
import com.yd.api.result.JsonResult;
/**
*
* @author Simon Cheng
*
*/
@Controller
public class AppErrorController implements ErrorController{
private static final Logger logger = LoggerFactory.getLogger(AppErrorController.class);
private static AppErrorController appErrorController;
/**
* Error Attributes in the Application
*/
@Autowired
private ErrorAttributes errorAttributes;
private final static String ERROR_PATH = "/error";
/**
* Controller for the Error Controller
* @param errorAttributes
* @return
*/
public AppErrorController(ErrorAttributes errorAttributes) {
this.errorAttributes = errorAttributes;
}
public AppErrorController() {
if(appErrorController == null){
appErrorController = new AppErrorController(errorAttributes);
}
}
/**
* Supports the HTML Error View
* @param request
* @return
*/
@RequestMapping(value = ERROR_PATH, produces = "text/html")
public void errorHtml(HttpServletRequest request,HttpServletResponse response) {
Object status = request.getAttribute(RequestDispatcher.ERROR_STATUS_CODE);
String redirectURL = "/ydapi/errorunknown.html";
if (status != null) {
Integer statusCode = Integer.valueOf(status.toString());
if (statusCode == HttpStatus.NOT_FOUND.value()) {
redirectURL = "/ydapi/error404.html";
}else if(statusCode == HttpStatus.INTERNAL_SERVER_ERROR.value()) {
redirectURL = "/ydapi/error500.html";
}else {
redirectURL = "/ydapi/errorunknown.html";
}
}
try {
response.sendRedirect(redirectURL);
} catch (IOException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
}
/**
* Supports other formats like JSON, XML
* @param request
* @return
*/
@RequestMapping(value = ERROR_PATH)
@ResponseBody
public Object error(HttpServletRequest request) {
Map<String, Object> body = getErrorAttributes(request, getTraceParameter(request));
HttpStatus status = getStatus(request);
JsonResult result = new JsonResult();
ErrorResponseVO errorResponseVO = new ErrorResponseVO();
errorResponseVO.setCommonResult(new CommonResult(false,"API not exist! Please go to our home page https://www.ydinsurance.cn/, or call 13661741633."));
result.setData(new ResponseEntity<Map<String, Object>>(body, status));
result.addResult(errorResponseVO);
return result;
}
/**
* Returns the path of the error page.
*
* @return the error path
*/
@Override
public String getErrorPath() {
return ERROR_PATH;
}
private boolean getTraceParameter(HttpServletRequest request) {
String parameter = request.getParameter("trace");
if (parameter == null) {
return false;
}
return !"false".equals(parameter.toLowerCase());
}
private Map<String, Object> getErrorAttributes(HttpServletRequest request,
boolean includeStackTrace) {
RequestAttributes requestAttributes = new ServletRequestAttributes(request);
Map<String, Object> map = this.errorAttributes.getErrorAttributes(requestAttributes,includeStackTrace);
String URL = request.getRequestURL().toString();
map.put("URL", URL);
logger.debug("AppErrorController.method [error info]: status-" + map.get("status") +", request url-" + URL);
return map;
}
private HttpStatus getStatus(HttpServletRequest request) {
Integer statusCode = (Integer) request
.getAttribute("javax.servlet.error.status_code");
if (statusCode != null) {
try {
return HttpStatus.valueOf(statusCode);
}
catch (Exception ex) {
}
}
return HttpStatus.INTERNAL_SERVER_ERROR;
}
}
\ No newline at end of file
yd-api/src/main/java/com/yd/api/result/ErrorResponseVO.java 0 → 100644
/**
*
*/
package com.yd.api.result;
/**
* @author Simon Cheng
*
*/
public class ErrorResponseVO {
private CommonResult commonResult;
public CommonResult getCommonResult() {
return commonResult;
}
public void setCommonResult(CommonResult commonResult) {
this.commonResult = commonResult;
}
}
\ No newline at end of file
yd-api/src/main/java/com/yd/util/auth/filter/HttpZuihuibiAuthorizeFilter.java
...@@ -42,7 +42,8 @@ public class HttpZuihuibiAuthorizeFilter implements Filter{ ...@@ -42,7 +42,8 @@ public class HttpZuihuibiAuthorizeFilter implements Filter{
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)throws IOException, ServletException{ public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)throws IOException, ServletException{
HttpServletRequest httpRequest = (HttpServletRequest)request; HttpServletRequest httpRequest = (HttpServletRequest)request;
HttpServletResponse httpResponse = (HttpServletResponse) response; HttpServletResponse httpResponse = (HttpServletResponse) response;
httpResponse.setHeader("Access-Control-Allow-Origin", "*"); httpResponse.setHeader("Access-Control-Allow-Origin", "*");
httpResponse.setHeader("x-frame-options","x-frame-options");
String requestUri = httpRequest.getRequestURI(); String requestUri = httpRequest.getRequestURI();
boolean isDoFilter = false; boolean isDoFilter = false;
......
yd-api/src/main/resources/static/error404.html 0 → 100644
<!DOCTYPE html>
<html lang="en">
<head>
<title>We've got some trouble</title>
</head>
<body>
<div class="cover">
<h1>Our apologies for resource not found.</h1>
<p class="lead">This API stepped out for a quick ride.</p>
<p>Please go to our home page <a href ="https://www.ydinsurance.cn/" target = "_blank">https://www.ydinsurance.cn/</a>, or call 13661741633.</p>
</div>
</body>
</html>
\ No newline at end of file
yd-api/src/main/resources/static/error500.html 0 → 100644
<!DOCTYPE html>
<html lang="en">
<head>
<title>We've got some trouble</title>
</head>
<body>
<div class="cover">
<h1>Our apologies for internal error.</h1>
<p class="lead">This API stepped out for a quick ride.</p>
<p>Please go to our home page <a href ="https://www.ydinsurance.cn/" target = "_blank">https://www.ydinsurance.cn/</a>, or call 13661741633.</p>
</div>
</body>
</html>
\ No newline at end of file
yd-api/src/main/resources/static/errorunknown.html 0 → 100644
<!DOCTYPE html>
<html lang="en">
<head>
<title>We've got some trouble</title>
</head>
<body>
<div class="cover">
<h1>Our apologies for unknown error.</h1>
<p class="lead">This API stepped out for a quick ride.</p>
<p>Please go to our home page <a href ="https://www.ydinsurance.cn/" target = "_blank">https://www.ydinsurance.cn/</a>, or call 13661741633.</p>
</div>
</body>
</html>
\ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment