提交配置校验

base-manager/src/main/java/com/mortals/xhx/base/framework/filter/SameSiteCookieFilter.java

@@ -41,17 +41,21 @@ public class SameSiteCookieFilter implements Filter {
         }
         //cors
         String referer = httpRequest.getHeader("Referer");
-        if(ObjectUtils.isEmpty(referer))  chain.doFilter(request, response);
-
-        referer=StrUtil.removeSuffix(referer,"/");
-
-        List<String> trustReferers = StrUtil.split(trustedReferer, ",");
-        if(ObjectUtils.isEmpty(trustReferers))  chain.doFilter(request, response);
-
-        if(trustReferers.contains(referer)) {
+        if(ObjectUtils.isEmpty(referer)){
             chain.doFilter(request, response);
-        }else {
-            httpResponse.sendError(HttpServletResponse.SC_FORBIDDEN, "CSRF protection");
+        }else{
+            referer=StrUtil.removeSuffix(referer,"/");
+
+            List<String> trustReferers = StrUtil.split(trustedReferer, ",");
+            if(ObjectUtils.isEmpty(trustReferers)){
+                chain.doFilter(request, response);
+            }else{
+                if(trustReferers.contains(referer)) {
+                    chain.doFilter(request, response);
+                }else {
+                    httpResponse.sendError(HttpServletResponse.SC_FORBIDDEN, "CSRF protection");
+                }
+            }
         }
         chain.doFilter(request, response);
     }

base-manager/src/test/java/com/mortals/httpclient/system/system.http

@@ -261,3 +261,13 @@ Content-Type: application/json
 
 {}
 
+
+###参数信息更新与保存
+POST http://192.168.0.98:8090/basics_api/zwfw/page/bury/save
+Content-Type: application/json
+
+{
+  "name":"upd19g"
+
+}
+