优化修改密码日志存储明文问题(I6ESO9)

RuoYi

2023-03-05 3a613ca66603f2b04c07f19901b7dcd7894f096c

优化修改密码日志存储明文问题(I6ESO9)

 src/main/java/com/ruoyi/framework/aspectj/LogAspect.java

@@ -165,14 +165,15 @@
    private void setRequestValue(JoinPoint joinPoint, SysOperLog operLog, String[] excludeParamNames) throws Exception

    {

        String requestMethod = operLog.getRequestMethod();

        if (HttpMethod.PUT.name().equals(requestMethod) || HttpMethod.POST.name().equals(requestMethod))

        Map<?, ?> paramsMap = ServletUtils.getParamMap(ServletUtils.getRequest());

        if (StringUtils.isEmpty(paramsMap)

                && (HttpMethod.PUT.name().equals(requestMethod) || HttpMethod.POST.name().equals(requestMethod)))

        {

            String params = argsArrayToString(joinPoint.getArgs(), excludeParamNames);

            operLog.setOperParam(StringUtils.substring(params, 0, 2000));

        }

        else

        {

            Map<?, ?> paramsMap = ServletUtils.getParamMap(ServletUtils.getRequest());

            operLog.setOperParam(StringUtils.substring(JSON.toJSONString(paramsMap, excludePropertyPreFilter(excludeParamNames)), 0, 2000));

        }

    }