ulthon/ulthon_admin
1
0
Fork 0
mirror of https://gitee.com/ulthon/ulthon_admin.git synced 2026-07-05 17:42:49 +08:00
Code Issues Packages Projects Releases Wiki Activity

优化上传扩展名的配置；增加上传文件代码注入检测；

Browse Source
This commit is contained in:
augushong
2022-10-29 11:12:22 +08:00
parent de688caa74
commit fa635ba3ac
3 changed files with 31 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
public/static/plugs/easy-admin/easy-admin.js
View File

@@ -63,15 +63,17 @@ define(["jquery", "tableSelect", "ckeditor", 'miniTheme', 'tableData', 'citypick
'file': []
}
var allExtGroup = [];
for (const extGroupName in extGroup) {
if (Object.hasOwnProperty.call(extGroup, extGroupName)) {
const extGroupList = extGroup[extGroupName];
if (init.upload_exts.length > 0) {
init.upload_exts += '|';
}
init.upload_exts += extGroupList.join('|')
allExtGroup = allExtGroup.concat(extGroupList)
}
}
init.upload_exts += allExtGroup.join('|')
var admin = {
config: {
@@ -1963,7 +1965,7 @@ define(["jquery", "tableSelect", "ckeditor", 'miniTheme', 'tableData', 'citypick
if (uploadList.length > 0) {
$.each(uploadList, function (i, v) {
var uploadExts = $(this).attr('data-upload-exts') || init.upload_exts,
var uploadExts = $(this).attr('data-upload-exts'),
uploadName = $(this).attr('data-upload'),
uploadNumber = $(this).attr('data-upload-number') || 'one',
uploadSign = $(this).attr('data-upload-sign') || '|',
@@ -1975,9 +1977,9 @@ define(["jquery", "tableSelect", "ckeditor", 'miniTheme', 'tableData', 'citypick
if (uploadExts == '*') {
uploadExts = init.upload_exts;
}else if(uploadExts.charAt(0) == '*'){
} else if (uploadExts.charAt(0) == '*') {
var extGroupName = uploadExts.slice(1);
if(extGroup[extGroupName]){
if (extGroup[extGroupName]) {
uploadExts = extGroup[extGroupName].join('|');
}
}