导出Excel时屏蔽公式，防止CSV注入风险

RuoYi

2022-01-27 fef0630608f7ca85dc2afd050221b16abdb062de

 src/main/java/com/ruoyi/common/utils/poi/ExcelUtil.java

@@ -16,36 +16,59 @@
import java.util.HashMap;

import java.util.List;

import java.util.Map;

import java.util.Set;

import java.util.UUID;

import java.util.stream.Collectors;

import org.apache.poi.hssf.usermodel.HSSFDateUtil;

import javax.servlet.http.HttpServletResponse;

import org.apache.poi.hssf.usermodel.HSSFClientAnchor;

import org.apache.poi.hssf.usermodel.HSSFPicture;

import org.apache.poi.hssf.usermodel.HSSFPictureData;

import org.apache.poi.hssf.usermodel.HSSFShape;

import org.apache.poi.hssf.usermodel.HSSFSheet;

import org.apache.poi.hssf.usermodel.HSSFWorkbook;

import org.apache.poi.ooxml.POIXMLDocumentPart;

import org.apache.poi.ss.usermodel.BorderStyle;

import org.apache.poi.ss.usermodel.Cell;

import org.apache.poi.ss.usermodel.CellStyle;

import org.apache.poi.ss.usermodel.CellType;

import org.apache.poi.ss.usermodel.ClientAnchor;

import org.apache.poi.ss.usermodel.DataValidation;

import org.apache.poi.ss.usermodel.DataValidationConstraint;

import org.apache.poi.ss.usermodel.DataValidationHelper;

import org.apache.poi.ss.usermodel.DateUtil;

import org.apache.poi.ss.usermodel.Drawing;

import org.apache.poi.ss.usermodel.FillPatternType;

import org.apache.poi.ss.usermodel.Font;

import org.apache.poi.ss.usermodel.HorizontalAlignment;

import org.apache.poi.ss.usermodel.IndexedColors;

import org.apache.poi.ss.usermodel.PictureData;

import org.apache.poi.ss.usermodel.Row;

import org.apache.poi.ss.usermodel.Sheet;

import org.apache.poi.ss.usermodel.VerticalAlignment;

import org.apache.poi.ss.usermodel.Workbook;

import org.apache.poi.ss.usermodel.WorkbookFactory;

import org.apache.poi.ss.util.CellRangeAddress;

import org.apache.poi.ss.util.CellRangeAddressList;

import org.apache.poi.util.IOUtils;

import org.apache.poi.xssf.streaming.SXSSFWorkbook;

import org.apache.poi.xssf.usermodel.XSSFClientAnchor;

import org.apache.poi.xssf.usermodel.XSSFDataValidation;

import org.apache.poi.xssf.usermodel.XSSFDrawing;

import org.apache.poi.xssf.usermodel.XSSFPicture;

import org.apache.poi.xssf.usermodel.XSSFShape;

import org.apache.poi.xssf.usermodel.XSSFSheet;

import org.apache.poi.xssf.usermodel.XSSFWorkbook;

import org.openxmlformats.schemas.drawingml.x2006.spreadsheetDrawing.CTMarker;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import com.ruoyi.common.core.text.Convert;

import com.ruoyi.common.exception.CustomException;

import com.ruoyi.common.exception.UtilException;

import com.ruoyi.common.utils.DateUtils;

import com.ruoyi.common.utils.DictUtils;

import com.ruoyi.common.utils.StringUtils;

import com.ruoyi.common.utils.file.FileTypeUtils;

import com.ruoyi.common.utils.file.FileUtils;

import com.ruoyi.common.utils.file.ImageUtils;

import com.ruoyi.common.utils.reflect.ReflectUtils;

import com.ruoyi.framework.aspectj.lang.annotation.Excel;

import com.ruoyi.framework.aspectj.lang.annotation.Excel.ColumnType;

@@ -62,6 +85,8 @@
public class ExcelUtil<T>

{

    private static final Logger log = LoggerFactory.getLogger(ExcelUtil.class);



    public static final String[] FORMULA_STR = { "=", "-", "+", "@" };



    /**

     * Excel sheet最大行数，默认65536

@@ -104,6 +129,31 @@
    private List<Object[]> fields;



    /**

     * 当前行号

     */

    private int rownum;

    
    /**

     * 标题

     */

    private String title;



    /**

     * 最大高度

     */

    private short maxHeight;



    /**

     * 统计列表

     */

    private Map<Integer, Double> statistics = new HashMap<Integer, Double>();



    /**

     * 数字格式

     */

    private static final DecimalFormat DOUBLE_FORMAT = new DecimalFormat("######0.00");



    /**

     * 实体对象

     */

    public Class<T> clazz;

@@ -113,7 +163,7 @@
        this.clazz = clazz;

    }



    public void init(List<T> list, String sheetName, Type type)

    public void init(List<T> list, String sheetName, String title, Type type)

    {

        if (list == null)

        {

@@ -122,8 +172,27 @@
        this.list = list;

        this.sheetName = sheetName;

        this.type = type;

        this.title = title;

        createExcelField();

        createWorkbook();

        createTitle();

    }



    /**

     * 创建excel第一行标题

     */

    public void createTitle()

    {

        if (StringUtils.isNotEmpty(title))

        {

            Row titleRow = sheet.createRow(rownum == 0 ? rownum++ : 0);

            titleRow.setHeightInPoints(30);

            Cell titleCell = titleRow.createCell(0);

            titleCell.setCellStyle(styles.get("title"));

            titleCell.setCellValue(title);

            sheet.addMergedRegion(new CellRangeAddress(titleRow.getRowNum(), titleRow.getRowNum(), titleRow.getRowNum(),

                    this.fields.size() - 1));

        }

    }



    /**

@@ -134,46 +203,59 @@
     */

    public List<T> importExcel(InputStream is) throws Exception

    {

        return importExcel(StringUtils.EMPTY, is);

        return importExcel(is, 0);

    }



    /**

     * 对excel表单默认第一个索引名转换成list

     * 
     * @param is 输入流

     * @param titleNum 标题占用行数

     * @return 转换后集合

     */

    public List<T> importExcel(InputStream is, int titleNum) throws Exception

    {

        return importExcel(StringUtils.EMPTY, is, titleNum);

    }



    /**

     * 对excel表单指定表格索引名转换成list

     * 

     * @param sheetName 表格索引名

     * @param titleNum 标题占用行数

     * @param is 输入流

     * @return 转换后集合

     */

    public List<T> importExcel(String sheetName, InputStream is) throws Exception

    public List<T> importExcel(String sheetName, InputStream is, int titleNum) throws Exception

    {

        this.type = Type.IMPORT;

        this.wb = WorkbookFactory.create(is);

        List<T> list = new ArrayList<T>();

        Sheet sheet = null;

        if (StringUtils.isNotEmpty(sheetName))

        {

            // 如果指定sheet名,则取指定sheet中的内容.

            sheet = wb.getSheet(sheetName);

        }

        else

        {

            // 如果传入的sheet名不存在则默认指向第1个sheet.

            sheet = wb.getSheetAt(0);

        }



        // 如果指定sheet名,则取指定sheet中的内容 否则默认指向第1个sheet

        Sheet sheet = StringUtils.isNotEmpty(sheetName) ? wb.getSheet(sheetName) : wb.getSheetAt(0);

        if (sheet == null)

        {

            throw new IOException("文件sheet不存在");

        }



        int rows = sheet.getPhysicalNumberOfRows();

        boolean isXSSFWorkbook = !(wb instanceof HSSFWorkbook);

        Map<String, PictureData> pictures;

        if (isXSSFWorkbook)

        {

            pictures = getSheetPictures07((XSSFSheet) sheet, (XSSFWorkbook) wb);

        }

        else

        {

            pictures = getSheetPictures03((HSSFSheet) sheet, (HSSFWorkbook) wb);

        }

        // 获取最后一个非空行的行下标，比如总行数为n，则返回的为n-1

        int rows = sheet.getLastRowNum();



        if (rows > 0)

        {

            // 定义一个map用于存放excel列的序号和field.

            Map<String, Integer> cellMap = new HashMap<String, Integer>();

            // 获取表头

            Row heard = sheet.getRow(0);

            Row heard = sheet.getRow(titleNum);

            for (int i = 0; i < heard.getPhysicalNumberOfCells(); i++)

            {

                Cell cell = heard.getCell(i);

@@ -188,34 +270,36 @@
                }

            }

            // 有数据时才处理 得到类的所有field.

            Field[] allFields = clazz.getDeclaredFields();

            // 定义一个map用于存放列的序号和field.

            Map<Integer, Field> fieldsMap = new HashMap<Integer, Field>();

            for (int col = 0; col < allFields.length; col++)

            List<Object[]> fields = this.getFields();

            Map<Integer, Object[]> fieldsMap = new HashMap<Integer, Object[]>();

            for (Object[] objects : fields)

            {

                Field field = allFields[col];

                Excel attr = field.getAnnotation(Excel.class);

                if (attr != null && (attr.type() == Type.ALL || attr.type() == type))

                Excel attr = (Excel) objects[1];

                Integer column = cellMap.get(attr.name());

                if (column != null)

                {

                    // 设置类的私有字段属性可访问.

                    field.setAccessible(true);

                    Integer column = cellMap.get(attr.name());

                    fieldsMap.put(column, field);

                    fieldsMap.put(column, objects);

                }

            }

            for (int i = 1; i < rows; i++)

            for (int i = titleNum + 1; i <= rows; i++)

            {

                // 从第2行开始取数据,默认第一行是表头.

                Row row = sheet.getRow(i);

                // 判断当前行是否是空行

                if (isRowEmpty(row))

                {

                    continue;

                }

                T entity = null;

                for (Map.Entry<Integer, Field> entry : fieldsMap.entrySet())

                for (Map.Entry<Integer, Object[]> entry : fieldsMap.entrySet())

                {

                    Object val = this.getCellValue(row, entry.getKey());



                    // 如果不存在实例则新建.

                    entity = (entity == null ? clazz.newInstance() : entity);

                    // 从map中得到对应列的field.

                    Field field = fieldsMap.get(entry.getKey());

                    Field field = (Field) entry.getValue()[0];

                    Excel attr = (Excel) entry.getValue()[1];

                    // 取得类型,并根据对象类型设置值.

                    Class<?> fieldType = field.getType();

                    if (String.class == fieldType)

@@ -227,22 +311,30 @@
                        }

                        else

                        {

                            val = Convert.toStr(val);

                            String dateFormat = field.getAnnotation(Excel.class).dateFormat();

                            if (StringUtils.isNotEmpty(dateFormat))

                            {

                                val = DateUtils.parseDateToStr(dateFormat, (Date) val);

                            }

                            else

                            {

                                val = Convert.toStr(val);

                            }

                        }

                    }

                    else if ((Integer.TYPE == fieldType) || (Integer.class == fieldType))

                    else if ((Integer.TYPE == fieldType || Integer.class == fieldType) && StringUtils.isNumeric(Convert.toStr(val)))

                    {

                        val = Convert.toInt(val);

                    }

                    else if ((Long.TYPE == fieldType) || (Long.class == fieldType))

                    else if (Long.TYPE == fieldType || Long.class == fieldType)

                    {

                        val = Convert.toLong(val);

                    }

                    else if ((Double.TYPE == fieldType) || (Double.class == fieldType))

                    else if (Double.TYPE == fieldType || Double.class == fieldType)

                    {

                        val = Convert.toDouble(val);

                    }

                    else if ((Float.TYPE == fieldType) || (Float.class == fieldType))

                    else if (Float.TYPE == fieldType || Float.class == fieldType)

                    {

                        val = Convert.toFloat(val);

                    }

@@ -261,9 +353,12 @@
                            val = DateUtil.getJavaDate((Double) val);

                        }

                    }

                    else if (Boolean.TYPE == fieldType || Boolean.class == fieldType)

                    {

                        val = Convert.toBool(val, false);

                    }

                    if (StringUtils.isNotNull(fieldType))

                    {

                        Excel attr = field.getAnnotation(Excel.class);

                        String propertyName = field.getName();

                        if (StringUtils.isNotEmpty(attr.targetAttr()))

                        {

@@ -271,11 +366,28 @@
                        }

                        else if (StringUtils.isNotEmpty(attr.readConverterExp()))

                        {

                            val = reverseByExp(Convert.toStr(val), attr.readConverterExp());

                            val = reverseByExp(Convert.toStr(val), attr.readConverterExp(), attr.separator());

                        }

                        else if (StringUtils.isNotEmpty(attr.dictType()))

                        {

                            val = reverseDictByExp(attr.dictType(), Convert.toStr(val));

                            val = reverseDictByExp(Convert.toStr(val), attr.dictType(), attr.separator());

                        }

                        else if (!attr.handler().equals(ExcelHandlerAdapter.class))

                        {

                            val = dataFormatHandlerAdapter(val, attr);

                        }

                        else if (ColumnType.IMAGE == attr.cellType() && StringUtils.isNotEmpty(pictures))

                        {

                            PictureData image = pictures.get(row.getRowNum() + "_" + entry.getKey());

                            if (image == null)

                            {

                                val = "";

                            }

                            else

                            {

                                byte[] data = image.getData();

                                val = FileUtils.writeImportBytes(data);

                            }

                        }

                        ReflectUtils.invokeSetter(entity, propertyName, val);

                    }

@@ -295,8 +407,53 @@
     */

    public AjaxResult exportExcel(List<T> list, String sheetName)

    {

        this.init(list, sheetName, Type.EXPORT);

        return exportExcel(list, sheetName, StringUtils.EMPTY);

    }

    
    /**

     * 对list数据源将其里面的数据导入到excel表单

     * 
     * @param list 导出数据集合

     * @param sheetName 工作表的名称

     * @param title 标题

     * @return 结果

     */

    public AjaxResult exportExcel(List<T> list, String sheetName, String title)

    {

        this.init(list, sheetName, title, Type.EXPORT);

        return exportExcel();

    }



    /**

     * 对list数据源将其里面的数据导入到excel表单

     * 
     * @param response 返回数据

     * @param list 导出数据集合

     * @param sheetName 工作表的名称

     * @return 结果

     * @throws IOException

     */

    public void exportExcel(HttpServletResponse response, List<T> list, String sheetName)

    {

        exportExcel(response, list, sheetName, StringUtils.EMPTY);

    }



    /**

     * 对list数据源将其里面的数据导入到excel表单

     * 
     * @param response 返回数据

     * @param list 导出数据集合

     * @param sheetName 工作表的名称

     * @param title 标题

     * @return 结果

     * @throws IOException

     */

    public void exportExcel(HttpServletResponse response, List<T> list, String sheetName, String title)

    {

        response.setContentType("application/vnd.openxmlformats-officedocument.spreadsheetml.sheet");

        response.setCharacterEncoding("utf-8");

        this.init(list, sheetName, title, Type.EXPORT);

        exportExcel(response);

    }



    /**

@@ -307,8 +464,68 @@
     */

    public AjaxResult importTemplateExcel(String sheetName)

    {

        this.init(null, sheetName, Type.IMPORT);

        return importTemplateExcel(sheetName, StringUtils.EMPTY);

    }



    /**

     * 对list数据源将其里面的数据导入到excel表单

     * 
     * @param sheetName 工作表的名称

     * @param title 标题

     * @return 结果

     */

    public AjaxResult importTemplateExcel(String sheetName, String title)

    {

        this.init(null, sheetName, title, Type.IMPORT);

        return exportExcel();

    }



    /**

     * 对list数据源将其里面的数据导入到excel表单

     * 
     * @param sheetName 工作表的名称

     * @return 结果

     */

    public void importTemplateExcel(HttpServletResponse response, String sheetName)

    {

        importTemplateExcel(response, sheetName, StringUtils.EMPTY);

    }



    /**

     * 对list数据源将其里面的数据导入到excel表单

     * 
     * @param sheetName 工作表的名称

     * @param title 标题

     * @return 结果

     */

    public void importTemplateExcel(HttpServletResponse response, String sheetName, String title)

    {

        response.setContentType("application/vnd.openxmlformats-officedocument.spreadsheetml.sheet");

        response.setCharacterEncoding("utf-8");

        this.init(null, sheetName, title, Type.IMPORT);

        exportExcel(response);

    }



    /**

     * 对list数据源将其里面的数据导入到excel表单

     * 
     * @return 结果

     */

    public void exportExcel(HttpServletResponse response)

    {

        try

        {

            writeSheet();

            wb.write(response.getOutputStream());

        }

        catch (Exception e)

        {

            log.error("导出Excel异常{}", e.getMessage());

        }

        finally

        {

            IOUtils.closeQuietly(wb);

        }

    }



    /**

@@ -321,26 +538,7 @@
        OutputStream out = null;

        try

        {

            // 取出一共有多少个sheet.

            double sheetNo = Math.ceil(list.size() / sheetSize);

            for (int index = 0; index <= sheetNo; index++)

            {

                createSheet(sheetNo, index);



                // 产生一行

                Row row = sheet.createRow(0);

                int column = 0;

                // 写入各个字段的列头名称

                for (Object[] os : fields)

                {

                    Excel excel = (Excel) os[1];

                    this.createCell(excel, row, column++);

                }

                if (Type.EXPORT.equals(type))

                {

                    fillExcelData(index, row);

                }

            }

            writeSheet();

            String filename = encodingFilename(sheetName);

            out = new FileOutputStream(getAbsoluteFile(filename));

            wb.write(out);

@@ -349,31 +547,39 @@
        catch (Exception e)

        {

            log.error("导出Excel异常{}", e.getMessage());

            throw new CustomException("导出Excel失败，请联系网站管理员！");

            throw new UtilException("导出Excel失败，请联系网站管理员！");

        }

        finally

        {

            if (wb != null)

            IOUtils.closeQuietly(wb);

            IOUtils.closeQuietly(out);

        }

    }



    /**

     * 创建写入数据到Sheet

     */

    public void writeSheet()

    {

        // 取出一共有多少个sheet.

        int sheetNo = Math.max(1, (int) Math.ceil(list.size() * 1.0 / sheetSize));

        for (int index = 0; index < sheetNo; index++)

        {

            createSheet(sheetNo, index);



            // 产生一行

            Row row = sheet.createRow(rownum);

            int column = 0;

            // 写入各个字段的列头名称

            for (Object[] os : fields)

            {

                try

                {

                    wb.close();

                }

                catch (IOException e1)

                {

                    e1.printStackTrace();

                }

                Excel excel = (Excel) os[1];

                this.createCell(excel, row, column++);

            }

            if (out != null)

            if (Type.EXPORT.equals(type))

            {

                try

                {

                    out.close();

                }

                catch (IOException e1)

                {

                    e1.printStackTrace();

                }

                fillExcelData(index, row);

                addStatisticsRow();

            }

        }

    }

@@ -390,7 +596,7 @@
        int endNo = Math.min(startNo + sheetSize, list.size());

        for (int i = startNo; i < endNo; i++)

        {

            row = sheet.createRow(i + 1 - startNo);

            row = sheet.createRow(i + 1 + rownum - startNo);

            // 得到导出对象.

            T vo = (T) list.get(i);

            int column = 0;

@@ -398,8 +604,6 @@
            {

                Field field = (Field) os[0];

                Excel excel = (Excel) os[1];

                // 设置实体类私有属性可访问

                field.setAccessible(true);

                this.addCell(excel, row, vo, field, column++);

            }

        }

@@ -416,6 +620,16 @@
        // 写入各条记录,每条记录对应excel表中的一行

        Map<String, CellStyle> styles = new HashMap<String, CellStyle>();

        CellStyle style = wb.createCellStyle();

        style.setAlignment(HorizontalAlignment.CENTER);

        style.setVerticalAlignment(VerticalAlignment.CENTER);

        Font titleFont = wb.createFont();

        titleFont.setFontName("Arial");

        titleFont.setFontHeightInPoints((short) 16);

        titleFont.setBold(true);

        style.setFont(titleFont);

        styles.put("title", style);



        style = wb.createCellStyle();

        style.setAlignment(HorizontalAlignment.CENTER);

        style.setVerticalAlignment(VerticalAlignment.CENTER);

        style.setBorderRight(BorderStyle.THIN);

@@ -446,6 +660,30 @@
        style.setFont(headerFont);

        styles.put("header", style);



        style = wb.createCellStyle();

        style.setAlignment(HorizontalAlignment.CENTER);

        style.setVerticalAlignment(VerticalAlignment.CENTER);

        Font totalFont = wb.createFont();

        totalFont.setFontName("Arial");

        totalFont.setFontHeightInPoints((short) 10);

        style.setFont(totalFont);

        styles.put("total", style);



        style = wb.createCellStyle();

        style.cloneStyleFrom(styles.get("data"));

        style.setAlignment(HorizontalAlignment.LEFT);

        styles.put("data1", style);



        style = wb.createCellStyle();

        style.cloneStyleFrom(styles.get("data"));

        style.setAlignment(HorizontalAlignment.CENTER);

        styles.put("data2", style);



        style = wb.createCellStyle();

        style.cloneStyleFrom(styles.get("data"));

        style.setAlignment(HorizontalAlignment.RIGHT);

        styles.put("data3", style);



        return styles;

    }



@@ -474,14 +712,61 @@
    {

        if (ColumnType.STRING == attr.cellType())

        {

            cell.setCellType(CellType.NUMERIC);

            cell.setCellValue(StringUtils.isNull(value) ? attr.defaultValue() : value + attr.suffix());

            String cellValue = Convert.toStr(value);

            // 对于任何以表达式触发字符 =-+@开头的单元格，直接使用tab字符作为前缀，防止CSV注入。

            if (StringUtils.containsAny(cellValue, FORMULA_STR))

            {

                cellValue = StringUtils.replaceEach(cellValue, FORMULA_STR, new String[] { "\t=", "\t-", "\t+", "\t@" });

            }

            cell.setCellValue(StringUtils.isNull(cellValue) ? attr.defaultValue() : cellValue + attr.suffix());

        }

        else if (ColumnType.NUMERIC == attr.cellType())

        {

            cell.setCellType(CellType.NUMERIC);

            cell.setCellValue(Integer.parseInt(value + ""));

            if (StringUtils.isNotNull(value))

            {

                cell.setCellValue(StringUtils.contains(Convert.toStr(value), ".") ? Convert.toDouble(value) : Convert.toInt(value));

            }

        }

        else if (ColumnType.IMAGE == attr.cellType())

        {

            ClientAnchor anchor = new XSSFClientAnchor(0, 0, 0, 0, (short) cell.getColumnIndex(), cell.getRow().getRowNum(), (short) (cell.getColumnIndex() + 1), cell.getRow().getRowNum() + 1);

            String imagePath = Convert.toStr(value);

            if (StringUtils.isNotEmpty(imagePath))

            {

                byte[] data = ImageUtils.getImage(imagePath);

                getDrawingPatriarch(cell.getSheet()).createPicture(anchor,

                        cell.getSheet().getWorkbook().addPicture(data, getImageType(data)));

            }

        }

    }



    /**

     * 获取画布

     */

    public static Drawing<?> getDrawingPatriarch(Sheet sheet)

    {

        if (sheet.getDrawingPatriarch() == null)

        {

            sheet.createDrawingPatriarch();

        }

        return sheet.getDrawingPatriarch();

    }



    /**

     * 获取图片类型,设置图片插入类型

     */

    public int getImageType(byte[] value)

    {

        String type = FileTypeUtils.getFileExtendName(value);

        if ("JPG".equalsIgnoreCase(type))

        {

            return Workbook.PICTURE_TYPE_JPEG;

        }

        else if ("PNG".equalsIgnoreCase(type))

        {

            return Workbook.PICTURE_TYPE_PNG;

        }

        return Workbook.PICTURE_TYPE_JPEG;

    }



    /**

@@ -497,7 +782,6 @@
        {

            // 设置列宽

            sheet.setColumnWidth(column, (int) ((attr.width() + 0.72) * 256));

            row.setHeight((short) (attr.height() * 20));

        }

        // 如果设置了提示信息则鼠标放上去提示.

        if (StringUtils.isNotEmpty(attr.prompt()))

@@ -522,18 +806,20 @@
        try

        {

            // 设置行高

            row.setHeight((short) (attr.height() * 20));

            row.setHeight(maxHeight);

            // 根据Excel中设置情况决定是否导出,有些情况需要保持为空,希望用户填写这一列.

            if (attr.isExport())

            {

                // 创建cell

                cell = row.createCell(column);

                cell.setCellStyle(styles.get("data"));

                int align = attr.align().value();

                cell.setCellStyle(styles.get("data" + (align >= 1 && align <= 3 ? align : "")));



                // 用于读取对象中的属性

                Object value = getTargetValue(vo, field, attr);

                String dateFormat = attr.dateFormat();

                String readConverterExp = attr.readConverterExp();

                String separator = attr.separator();

                String dictType = attr.dictType();

                if (StringUtils.isNotEmpty(dateFormat) && StringUtils.isNotNull(value))

                {

@@ -541,17 +827,26 @@
                }

                else if (StringUtils.isNotEmpty(readConverterExp) && StringUtils.isNotNull(value))

                {

                    cell.setCellValue(convertByExp(Convert.toStr(value), readConverterExp));

                    cell.setCellValue(convertByExp(Convert.toStr(value), readConverterExp, separator));

                }

                else if (StringUtils.isNotEmpty(dictType))

                else if (StringUtils.isNotEmpty(dictType) && StringUtils.isNotNull(value))

                {

                    cell.setCellValue(convertDictByExp(dictType, Convert.toStr(value)));

                    cell.setCellValue(convertDictByExp(Convert.toStr(value), dictType, separator));

                }

                else if (value instanceof BigDecimal && -1 != attr.scale())

                {

                    cell.setCellValue((((BigDecimal) value).setScale(attr.scale(), attr.roundingMode())).toString());

                }

                else if (!attr.handler().equals(ExcelHandlerAdapter.class))

                {

                    cell.setCellValue(dataFormatHandlerAdapter(value, attr));

                }

                else

                {

                    // 设置列类型

                    setCellVo(value, attr, cell);

                }

                addStatisticsData(column, Convert.toStr(value), attr);

            }

        }

        catch (Exception e)

@@ -623,28 +918,36 @@
     * 

     * @param propertyValue 参数值

     * @param converterExp 翻译注解

     * @param separator 分隔符

     * @return 解析后值

     * @throws Exception

     */

    public static String convertByExp(String propertyValue, String converterExp) throws Exception

    public static String convertByExp(String propertyValue, String converterExp, String separator)

    {

        try

        StringBuilder propertyString = new StringBuilder();

        String[] convertSource = converterExp.split(",");

        for (String item : convertSource)

        {

            String[] convertSource = converterExp.split(",");

            for (String item : convertSource)

            String[] itemArray = item.split("=");

            if (StringUtils.containsAny(separator, propertyValue))

            {

                String[] itemArray = item.split("=");

                for (String value : propertyValue.split(separator))

                {

                    if (itemArray[0].equals(value))

                    {

                        propertyString.append(itemArray[1] + separator);

                        break;

                    }

                }

            }

            else

            {

                if (itemArray[0].equals(propertyValue))

                {

                    return itemArray[1];

                }

            }

        }

        catch (Exception e)

        {

            throw e;

        }

        return propertyValue;

        return StringUtils.stripEnd(propertyString.toString(), separator);

    }



    /**

@@ -652,52 +955,130 @@
     * 

     * @param propertyValue 参数值

     * @param converterExp 翻译注解

     * @param separator 分隔符

     * @return 解析后值

     * @throws Exception

     */

    public static String reverseByExp(String propertyValue, String converterExp) throws Exception

    public static String reverseByExp(String propertyValue, String converterExp, String separator)

    {

        try

        StringBuilder propertyString = new StringBuilder();

        String[] convertSource = converterExp.split(",");

        for (String item : convertSource)

        {

            String[] convertSource = converterExp.split(",");

            for (String item : convertSource)

            String[] itemArray = item.split("=");

            if (StringUtils.containsAny(separator, propertyValue))

            {

                String[] itemArray = item.split("=");

                for (String value : propertyValue.split(separator))

                {

                    if (itemArray[1].equals(value))

                    {

                        propertyString.append(itemArray[0] + separator);

                        break;

                    }

                }

            }

            else

            {

                if (itemArray[1].equals(propertyValue))

                {

                    return itemArray[0];

                }

            }

        }

        catch (Exception e)

        {

            throw e;

        }

        return propertyValue;

        return StringUtils.stripEnd(propertyString.toString(), separator);

    }



    /**

     * 解析字典值

     * 

     * @param dictType 字典类型

     * @param dictValue 字典值

     * @param dictType 字典类型

     * @param separator 分隔符

     * @return 字典标签

     */

    public static String convertDictByExp(String dictType, String dictValue) throws Exception

    public static String convertDictByExp(String dictValue, String dictType, String separator)

    {

        return DictUtils.getDictLabel(dictType, dictValue);

        return DictUtils.getDictLabel(dictType, dictValue, separator);

    }



    /**

     * 反向解析值字典值

     * 

     * @param dictLabel 字典标签

     * @param dictType 字典类型

     * @param dictValue 字典标签

     * @param separator 分隔符

     * @return 字典值

     */

    public static String reverseDictByExp(String dictType, String dictLabel) throws Exception

    public static String reverseDictByExp(String dictLabel, String dictType, String separator)

    {

        return DictUtils.getDictValue(dictType, dictLabel);

        return DictUtils.getDictValue(dictType, dictLabel, separator);

    }



    /**

     * 数据处理器

     * 
     * @param value 数据值

     * @param excel 数据注解

     * @return

     */

    public String dataFormatHandlerAdapter(Object value, Excel excel)

    {

        try

        {

            Object instance = excel.handler().newInstance();

            Method formatMethod = excel.handler().getMethod("format", new Class[] { Object.class, String[].class });

            value = formatMethod.invoke(instance, value, excel.args());

        }

        catch (Exception e)

        {

            log.error("不能格式化数据 " + excel.handler(), e.getMessage());

        }

        return Convert.toStr(value);

    }



    /**

     * 合计统计信息

     */

    private void addStatisticsData(Integer index, String text, Excel entity)

    {

        if (entity != null && entity.isStatistics())

        {

            Double temp = 0D;

            if (!statistics.containsKey(index))

            {

                statistics.put(index, temp);

            }

            try

            {

                temp = Double.valueOf(text);

            }

            catch (NumberFormatException e)

            {

            }

            statistics.put(index, statistics.get(index) + temp);

        }

    }



    /**

     * 创建统计行

     */

    public void addStatisticsRow()

    {

        if (statistics.size() > 0)

        {

            Row row = sheet.createRow(sheet.getLastRowNum() + 1);

            Set<Integer> keys = statistics.keySet();

            Cell cell = row.createCell(0);

            cell.setCellStyle(styles.get("total"));

            cell.setCellValue("合计");



            for (Integer key : keys)

            {

                cell = row.createCell(key);

                cell.setCellStyle(styles.get("total"));

                cell.setCellValue(DOUBLE_FORMAT.format(statistics.get(key)));

            }

            statistics.clear();

        }

    }



    /**

@@ -766,12 +1147,12 @@
     */

    private Object getValue(Object o, String name) throws Exception

    {

        if (StringUtils.isNotEmpty(name))

        if (StringUtils.isNotNull(o) && StringUtils.isNotEmpty(name))

        {

            Class<?> clazz = o.getClass();

            String methodName = "get" + name.substring(0, 1).toUpperCase() + name.substring(1);

            Method method = clazz.getMethod(methodName);

            o = method.invoke(o);

            Field field = clazz.getDeclaredField(name);

            field.setAccessible(true);

            o = field.get(o);

        }

        return o;

    }

@@ -781,7 +1162,17 @@
     */

    private void createExcelField()

    {

        this.fields = new ArrayList<Object[]>();

        this.fields = getFields();

        this.fields = this.fields.stream().sorted(Comparator.comparing(objects -> ((Excel) objects[1]).sort())).collect(Collectors.toList());

        this.maxHeight = getRowHeight();

    }



    /**

     * 获取字段注解信息

     */

    public List<Object[]> getFields()

    {

        List<Object[]> fields = new ArrayList<Object[]>();

        List<Field> tempFields = new ArrayList<>();

        tempFields.addAll(Arrays.asList(clazz.getSuperclass().getDeclaredFields()));

        tempFields.addAll(Arrays.asList(clazz.getDeclaredFields()));

@@ -790,7 +1181,12 @@
            // 单注解

            if (field.isAnnotationPresent(Excel.class))

            {

                putToField(field, field.getAnnotation(Excel.class));

                Excel attr = field.getAnnotation(Excel.class);

                if (attr != null && (attr.type() == Type.ALL || attr.type() == type))

                {

                    field.setAccessible(true);

                    fields.add(new Object[] { field, attr });

                }

            }



            // 多注解

@@ -798,24 +1194,31 @@
            {

                Excels attrs = field.getAnnotation(Excels.class);

                Excel[] excels = attrs.value();

                for (Excel excel : excels)

                for (Excel attr : excels)

                {

                    putToField(field, excel);

                    if (attr != null && (attr.type() == Type.ALL || attr.type() == type))

                    {

                        field.setAccessible(true);

                        fields.add(new Object[] { field, attr });

                    }

                }

            }

        }

        this.fields = this.fields.stream().sorted(Comparator.comparing(objects -> ((Excel) objects[1]).sort())).collect(Collectors.toList());

        return fields;

    }



    /**

     * 放到字段集合中

     * 根据注解获取最大行高

     */

    private void putToField(Field field, Excel attr)

    public short getRowHeight()

    {

        if (attr != null && (attr.type() == Type.ALL || attr.type() == type))

        double maxHeight = 0;

        for (Object[] os : this.fields)

        {

            this.fields.add(new Object[] { field, attr });

            Excel excel = (Excel) os[1];

            maxHeight = maxHeight > excel.height() ? maxHeight : excel.height();

        }

        return (short) (maxHeight * 20);

    }



    /**

@@ -824,6 +1227,9 @@
    public void createWorkbook()

    {

        this.wb = new SXSSFWorkbook(500);

        this.sheet = wb.createSheet();

        wb.setSheetName(0, sheetName);

        this.styles = createStyles(wb);

    }



    /**

@@ -832,17 +1238,13 @@
     * @param sheetNo sheet数量

     * @param index 序号

     */

    public void createSheet(double sheetNo, int index)

    public void createSheet(int sheetNo, int index)

    {

        this.sheet = wb.createSheet();

        this.styles = createStyles(wb);

        // 设置工作表的名称.

        if (sheetNo == 0)

        if (sheetNo > 1 && index > 0)

        {

            wb.setSheetName(index, sheetName);

        }

        else

        {

            this.sheet = wb.createSheet();

            this.createTitle();

            wb.setSheetName(index, sheetName + index);

        }

    }

@@ -866,18 +1268,18 @@
            Cell cell = row.getCell(column);

            if (StringUtils.isNotNull(cell))

            {

                if (cell.getCellTypeEnum() == CellType.NUMERIC || cell.getCellTypeEnum() == CellType.FORMULA)

                if (cell.getCellType() == CellType.NUMERIC || cell.getCellType() == CellType.FORMULA)

                {

                    val = cell.getNumericCellValue();

                    if (HSSFDateUtil.isCellDateFormatted(cell))

                    if (DateUtil.isCellDateFormatted(cell))

                    {

                        val = DateUtil.getJavaDate((Double) val); // POI Excel 日期格式转换

                    }

                    else

                    {

                        if ((Double) val % 1 > 0)

                        if ((Double) val % 1 != 0)

                        {

                            val = new DecimalFormat("0.00").format(val);

                            val = new BigDecimal(val.toString());

                        }

                        else

                        {

@@ -885,15 +1287,15 @@
                        }

                    }

                }

                else if (cell.getCellTypeEnum() == CellType.STRING)

                else if (cell.getCellType() == CellType.STRING)

                {

                    val = cell.getStringCellValue();

                }

                else if (cell.getCellTypeEnum() == CellType.BOOLEAN)

                else if (cell.getCellType() == CellType.BOOLEAN)

                {

                    val = cell.getBooleanCellValue();

                }

                else if (cell.getCellTypeEnum() == CellType.ERROR)

                else if (cell.getCellType() == CellType.ERROR)

                {

                    val = cell.getErrorCellValue();

                }

@@ -906,4 +1308,92 @@
        }

        return val;

    }

}


    /**

     * 判断是否是空行

     * 
     * @param row 判断的行

     * @return

     */

    private boolean isRowEmpty(Row row)

    {

        if (row == null)

        {

            return true;

        }

        for (int i = row.getFirstCellNum(); i < row.getLastCellNum(); i++)

        {

            Cell cell = row.getCell(i);

            if (cell != null && cell.getCellType() != CellType.BLANK)

            {

                return false;

            }

        }

        return true;

    }



    /**

     * 获取Excel2003图片

     *

     * @param sheet 当前sheet对象

     * @param workbook 工作簿对象

     * @return Map key:图片单元格索引（1_1）String，value:图片流PictureData

     */

    public static Map<String, PictureData> getSheetPictures03(HSSFSheet sheet, HSSFWorkbook workbook)

    {

        Map<String, PictureData> sheetIndexPicMap = new HashMap<String, PictureData>();

        List<HSSFPictureData> pictures = workbook.getAllPictures();

        if (!pictures.isEmpty())

        {

            for (HSSFShape shape : sheet.getDrawingPatriarch().getChildren())

            {

                HSSFClientAnchor anchor = (HSSFClientAnchor) shape.getAnchor();

                if (shape instanceof HSSFPicture)

                {

                    HSSFPicture pic = (HSSFPicture) shape;

                    int pictureIndex = pic.getPictureIndex() - 1;

                    HSSFPictureData picData = pictures.get(pictureIndex);

                    String picIndex = String.valueOf(anchor.getRow1()) + "_" + String.valueOf(anchor.getCol1());

                    sheetIndexPicMap.put(picIndex, picData);

                }

            }

            return sheetIndexPicMap;

        }

        else

        {

            return sheetIndexPicMap;

        }

    }



    /**

     * 获取Excel2007图片

     *

     * @param sheet 当前sheet对象

     * @param workbook 工作簿对象

     * @return Map key:图片单元格索引（1_1）String，value:图片流PictureData

     */

    public static Map<String, PictureData> getSheetPictures07(XSSFSheet sheet, XSSFWorkbook workbook)

    {

        Map<String, PictureData> sheetIndexPicMap = new HashMap<String, PictureData>();

        for (POIXMLDocumentPart dr : sheet.getRelations())

        {

            if (dr instanceof XSSFDrawing)

            {

                XSSFDrawing drawing = (XSSFDrawing) dr;

                List<XSSFShape> shapes = drawing.getShapes();

                for (XSSFShape shape : shapes)

                {

                    if (shape instanceof XSSFPicture)

                    {

                        XSSFPicture pic = (XSSFPicture) shape;

                        XSSFClientAnchor anchor = pic.getPreferredSize();

                        CTMarker ctMarker = anchor.getFrom();

                        String picIndex = ctMarker.getRow() + "_" + ctMarker.getCol();

                        sheetIndexPicMap.put(picIndex, pic.getPictureData());

                    }

                }

            }

        }

        return sheetIndexPicMap;

    }

}