admin/TaskPool
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: update ws security

Browse Source
This commit is contained in:
duorameng
2026-04-27 14:35:22 +08:00
parent 5a8baf7a0b
commit dc9ebdbf69
2 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/controllers/auth_controller.go
-1
View File
@@ -9,7 +9,6 @@ import (
"github.com/engigu/baihu-panel/internal/constant" "github.com/engigu/baihu-panel/internal/constant"
"github.com/engigu/baihu-panel/internal/eventbus" "github.com/engigu/baihu-panel/internal/eventbus"
"github.com/engigu/baihu-panel/internal/middleware" "github.com/engigu/baihu-panel/internal/middleware"
"github.com/engigu/baihu-panel/internal/models/vo"
"github.com/engigu/baihu-panel/internal/services" "github.com/engigu/baihu-panel/internal/services"
"github.com/engigu/baihu-panel/internal/utils" "github.com/engigu/baihu-panel/internal/utils"
internal/middleware/auth.go
+1 -1
View File
@@ -27,7 +27,7 @@ func AuthRequired() gin.HandlerFunc {
origin = c.GetHeader("Referer") origin = c.GetHeader("Referer")
} }
// 如果有 Origin 且不匹配则拒绝（实际部署时应配置允许的 Origin） // 如果有 Origin 且不匹配则拒绝（实际部署时应配置允许的 Origin）
if origin != "" && !utils.CheckWSOrigin(c.Writer, c.Request) { if origin != "" && !utils.CheckWSOrigin(c.Request) {
utils.Forbidden(c, "CSRF 校验失败: 非法的请求来源") utils.Forbidden(c, "CSRF 校验失败: 非法的请求来源")
c.Abort() c.Abort()
return return