|
@@ -1,26 +1,33 @@
|
|
|
package cn.keking.web.controller;
|
|
|
|
|
|
import cn.keking.config.ConfigConstants;
|
|
|
+import cn.keking.model.ReturnResponse;
|
|
|
import com.fasterxml.jackson.core.JsonProcessingException;
|
|
|
import com.fasterxml.jackson.databind.ObjectMapper;
|
|
|
-
|
|
|
-import cn.keking.model.ReturnResponse;
|
|
|
import org.slf4j.Logger;
|
|
|
import org.slf4j.LoggerFactory;
|
|
|
import org.springframework.util.StreamUtils;
|
|
|
-import org.springframework.web.bind.annotation.RequestMapping;
|
|
|
-import org.springframework.web.bind.annotation.RequestMethod;
|
|
|
+import org.springframework.web.bind.annotation.GetMapping;
|
|
|
+import org.springframework.web.bind.annotation.PostMapping;
|
|
|
import org.springframework.web.bind.annotation.RequestParam;
|
|
|
import org.springframework.web.bind.annotation.RestController;
|
|
|
import org.springframework.web.multipart.MultipartFile;
|
|
|
+import org.springframework.web.util.HtmlUtils;
|
|
|
|
|
|
-import java.io.*;
|
|
|
+import java.io.File;
|
|
|
+import java.io.FileOutputStream;
|
|
|
+import java.io.IOException;
|
|
|
+import java.io.InputStream;
|
|
|
+import java.io.OutputStream;
|
|
|
import java.nio.charset.StandardCharsets;
|
|
|
-import java.util.*;
|
|
|
-import org.springframework.web.util.HtmlUtils;
|
|
|
+import java.util.ArrayList;
|
|
|
+import java.util.Arrays;
|
|
|
+import java.util.HashMap;
|
|
|
+import java.util.List;
|
|
|
+import java.util.Map;
|
|
|
+import java.util.Objects;
|
|
|
|
|
|
/**
|
|
|
- *
|
|
|
* @author yudian-it
|
|
|
* @date 2017/12/1
|
|
|
*/
|
|
@@ -33,7 +40,7 @@ public class FileController {
|
|
|
private final String demoDir = "demo";
|
|
|
private final String demoPath = demoDir + File.separator;
|
|
|
|
|
|
- @RequestMapping(value = "fileUpload", method = RequestMethod.POST)
|
|
|
+ @PostMapping("/fileUpload")
|
|
|
public String fileUpload(@RequestParam("file") MultipartFile file) throws JsonProcessingException {
|
|
|
if (ConfigConstants.getFileUploadDisable()) {
|
|
|
return new ObjectMapper().writeValueAsString(ReturnResponse.failure("文件传接口已禁用"));
|
|
@@ -41,8 +48,9 @@ public class FileController {
|
|
|
// 获取文件名
|
|
|
String fileName = file.getOriginalFilename();
|
|
|
//判断是否为IE浏览器的文件名,IE浏览器下文件名会带有盘符信息
|
|
|
-
|
|
|
+
|
|
|
// escaping dangerous characters to prevent XSS
|
|
|
+ assert fileName != null;
|
|
|
fileName = HtmlUtils.htmlEscape(fileName, StandardCharsets.UTF_8.name());
|
|
|
|
|
|
// Check for Unix-style path
|
|
@@ -51,7 +59,7 @@ public class FileController {
|
|
|
int winSep = fileName.lastIndexOf('\\');
|
|
|
// Cut off at latest possible point
|
|
|
int pos = (Math.max(winSep, unixSep));
|
|
|
- if (pos != -1) {
|
|
|
+ if (pos != -1) {
|
|
|
fileName = fileName.substring(pos + 1);
|
|
|
}
|
|
|
// 判断是否存在同名文件
|
|
@@ -60,10 +68,10 @@ public class FileController {
|
|
|
}
|
|
|
File outFile = new File(fileDir + demoPath);
|
|
|
if (!outFile.exists() && !outFile.mkdirs()) {
|
|
|
- logger.error("创建文件夹【{}】失败,请检查目录权限!",fileDir + demoPath);
|
|
|
+ logger.error("创建文件夹【{}】失败,请检查目录权限!", fileDir + demoPath);
|
|
|
}
|
|
|
logger.info("上传文件:{}", fileDir + demoPath + fileName);
|
|
|
- try(InputStream in = file.getInputStream(); OutputStream out = new FileOutputStream(fileDir + demoPath + fileName)) {
|
|
|
+ try (InputStream in = file.getInputStream(); OutputStream out = new FileOutputStream(fileDir + demoPath + fileName)) {
|
|
|
StreamUtils.copy(in, out);
|
|
|
return new ObjectMapper().writeValueAsString(ReturnResponse.success(null));
|
|
|
} catch (IOException e) {
|
|
@@ -72,7 +80,7 @@ public class FileController {
|
|
|
}
|
|
|
}
|
|
|
|
|
|
- @RequestMapping(value = "deleteFile", method = RequestMethod.GET)
|
|
|
+ @GetMapping("/deleteFile")
|
|
|
public String deleteFile(String fileName) throws JsonProcessingException {
|
|
|
if (fileName.contains("/")) {
|
|
|
fileName = fileName.substring(fileName.lastIndexOf("/") + 1);
|
|
@@ -80,12 +88,12 @@ public class FileController {
|
|
|
File file = new File(fileDir + demoPath + fileName);
|
|
|
logger.info("删除文件:{}", file.getAbsolutePath());
|
|
|
if (file.exists() && !file.delete()) {
|
|
|
- logger.error("删除文件【{}】失败,请检查目录权限!",file.getPath());
|
|
|
+ logger.error("删除文件【{}】失败,请检查目录权限!", file.getPath());
|
|
|
}
|
|
|
return new ObjectMapper().writeValueAsString(ReturnResponse.success());
|
|
|
}
|
|
|
|
|
|
- @RequestMapping(value = "listFiles", method = RequestMethod.GET)
|
|
|
+ @GetMapping("/listFiles")
|
|
|
public String getFiles() throws JsonProcessingException {
|
|
|
List<Map<String, String>> list = new ArrayList<>();
|
|
|
File file = new File(fileDir + demoPath);
|