chore: update ws security
This commit is contained in:
@@ -9,7 +9,6 @@ import (
|
||||
"github.com/engigu/baihu-panel/internal/constant"
|
||||
"github.com/engigu/baihu-panel/internal/eventbus"
|
||||
"github.com/engigu/baihu-panel/internal/middleware"
|
||||
"github.com/engigu/baihu-panel/internal/models/vo"
|
||||
"github.com/engigu/baihu-panel/internal/services"
|
||||
"github.com/engigu/baihu-panel/internal/utils"
|
||||
|
||||
|
||||
@@ -27,7 +27,7 @@ func AuthRequired() gin.HandlerFunc {
|
||||
origin = c.GetHeader("Referer")
|
||||
}
|
||||
// 如果有 Origin 且不匹配则拒绝(实际部署时应配置允许的 Origin)
|
||||
if origin != "" && !utils.CheckWSOrigin(c.Writer, c.Request) {
|
||||
if origin != "" && !utils.CheckWSOrigin(c.Request) {
|
||||
utils.Forbidden(c, "CSRF 校验失败: 非法的请求来源")
|
||||
c.Abort()
|
||||
return
|
||||
|
||||
Reference in New Issue
Block a user