From 8ad863082097ffdcab4a8e7f426d344a1fe6f892 Mon Sep 17 00:00:00 2001
From: 吴羡 <16976746+Xian-TT3@user.noreply.gitee.com>
Date: 星期六, 07 十一月 2026 00:27:02 +0800
Subject: [PATCH] 修复人员管理接口校验与导出，完善设备保养计划与文件受控功能
---
cnas-personnel/src/main/java/com/ruoyi/personnel/controller/PersonBasicInfoController.java | 17 ++++++++++++++---
1 files changed, 14 insertions(+), 3 deletions(-)
diff --git a/cnas-personnel/src/main/java/com/ruoyi/personnel/controller/PersonBasicInfoController.java b/cnas-personnel/src/main/java/com/ruoyi/personnel/controller/PersonBasicInfoController.java
index f4bb37f..e6e02ae 100644
--- a/cnas-personnel/src/main/java/com/ruoyi/personnel/controller/PersonBasicInfoController.java
+++ b/cnas-personnel/src/main/java/com/ruoyi/personnel/controller/PersonBasicInfoController.java
@@ -96,9 +96,20 @@
// 鍒犻櫎鏂囦欢
@DeleteMapping("/deleteCNASFile")
public Result saveFile(String fileName) {
+ if (fileName == null || fileName.trim().isEmpty()) {
+ throw new ErrorException("缂哄皯鏂囦欢鍚�");
+ }
String[] split = fileName.split(",");
for (String s : split) {
- FileSaveUtil.DeleteFile(s);
+ String name = s.trim();
+ if (name.isEmpty()) {
+ continue;
+ }
+ // 鍙厑璁稿垹闄ゆ枃浠跺悕锛岀姝㈤�氳繃璺緞绌胯秺鍒犻櫎鍏朵粬鐩綍
+ if (name.contains("/") || name.contains("\\") || name.contains("..")) {
+ throw new ErrorException("鏂囦欢鍚嶄笉鍚堟硶");
+ }
+ FileSaveUtil.DeleteFile(name);
}
return Result.success();
@@ -144,8 +155,8 @@
@Operation(summary = "涓嬭浇浜哄憳妗ｆ鍗�")
@GetMapping("/exportPersonBasicInfoById")
- public Result exportPersonBasicInfoById(Integer id, HttpServletResponse response) {
- return Result.success(personBasicInfoService.exportPersonBasicInfoById(id,response));
+ public void exportPersonBasicInfoById(Integer id, HttpServletResponse response) {
+ personBasicInfoService.exportPersonBasicInfoById(id, response);
}
/**
--
Gitblit v1.9.3