阻止任意文件下载漏洞

RuoYi

2020-11-17 deb3594b40146777b749cc3b420ed632ae13959c

 src/main/java/com/ruoyi/framework/security/service/PermissionService.java

@@ -164,6 +164,6 @@
     */

    private boolean hasPermissions(Set<String> permissions, String permission)

    {

        return permissions.contains(ALL_PERMISSION) || permissions.equals(StringUtils.trim(permission));

        return permissions.contains(ALL_PERMISSION) || permissions.contains(StringUtils.trim(permission));

    }

}