RuoYi 2 年 前
コミット
a416d55780

+ 1 - 1
ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java

@@ -87,7 +87,7 @@ public class XssFilter implements GlobalFilter, Ordered
87 87
                     // 防xss攻击过滤
88 88
                     bodyStr = EscapeUtil.clean(bodyStr);
89 89
                     // 转成字节
90
-                    byte[] bytes = bodyStr.getBytes();
90
+                    byte[] bytes = bodyStr.getBytes(StandardCharsets.UTF_8);
91 91
                     NettyDataBufferFactory nettyDataBufferFactory = new NettyDataBufferFactory(ByteBufAllocator.DEFAULT);
92 92
                     DataBuffer buffer = nettyDataBufferFactory.allocateBuffer(bytes.length);
93 93
                     buffer.write(bytes);

+ 7 - 12
ruoyi-modules/ruoyi-system/src/main/java/com/ruoyi/system/controller/SysProfileController.java

@@ -66,27 +66,22 @@ public class SysProfileController extends BaseController
66 66
     public AjaxResult updateProfile(@RequestBody SysUser user)
67 67
     {
68 68
         LoginUser loginUser = SecurityUtils.getLoginUser();
69
-        SysUser sysUser = loginUser.getSysUser();
70
-        user.setUserName(sysUser.getUserName());
71
-        if (StringUtils.isNotEmpty(user.getPhonenumber()) && !userService.checkPhoneUnique(user))
69
+        SysUser currentUser = loginUser.getSysUser();
70
+        currentUser.setNickName(user.getNickName());
71
+        currentUser.setEmail(user.getEmail());
72
+        currentUser.setPhonenumber(user.getPhonenumber());
73
+        currentUser.setSex(user.getSex());
74
+        if (StringUtils.isNotEmpty(user.getPhonenumber()) && !userService.checkPhoneUnique(currentUser))
72 75
         {
73 76
             return error("修改用户'" + user.getUserName() + "'失败,手机号码已存在");
74 77
         }
75
-        else if (StringUtils.isNotEmpty(user.getEmail()) && !userService.checkEmailUnique(user))
78
+        if (StringUtils.isNotEmpty(user.getEmail()) && !userService.checkEmailUnique(currentUser))
76 79
         {
77 80
             return error("修改用户'" + user.getUserName() + "'失败,邮箱账号已存在");
78 81
         }
79
-        user.setUserId(sysUser.getUserId());
80
-        user.setPassword(null);
81
-        user.setAvatar(null);
82
-        user.setDeptId(null);
83 82
         if (userService.updateUserProfile(user) > 0)
84 83
         {
85 84
             // 更新缓存用户信息
86
-            loginUser.getSysUser().setNickName(user.getNickName());
87
-            loginUser.getSysUser().setPhonenumber(user.getPhonenumber());
88
-            loginUser.getSysUser().setEmail(user.getEmail());
89
-            loginUser.getSysUser().setSex(user.getSex());
90 85
             tokenService.setLoginUser(loginUser);
91 86
             return success();
92 87
         }