csrf 토큰 제거 submit을 jsp내로 옮김
This commit is contained in:
parent
31a3eedc58
commit
220e8f7ba9
@ -90,7 +90,7 @@ public class NlibSearchController extends NlibCommonController {
|
|||||||
* @param req
|
* @param req
|
||||||
* @return
|
* @return
|
||||||
*/
|
*/
|
||||||
@RequestMapping(value = {"/search/searchList.do", "/search/searchListCondition.do"} )
|
@RequestMapping(value = {"/search/searchList.do"} )
|
||||||
public String searchList(
|
public String searchList(
|
||||||
HttpServletRequest req
|
HttpServletRequest req
|
||||||
, Authentication authentication
|
, Authentication authentication
|
||||||
@ -102,25 +102,6 @@ public class NlibSearchController extends NlibCommonController {
|
|||||||
HttpSession session = request.getSession();
|
HttpSession session = request.getSession();
|
||||||
String councilCd = (String)session.getAttribute("councilCd");
|
String councilCd = (String)session.getAttribute("councilCd");
|
||||||
|
|
||||||
boolean fromMenu = request.getServletPath().contains("/search/searchList.do");
|
|
||||||
|
|
||||||
if(fromMenu) {
|
|
||||||
String sfield = searchVO.getSfield();
|
|
||||||
String query = searchVO.getQuery();
|
|
||||||
String collection = searchVO.getCollection();
|
|
||||||
searchVO = new NlibSearchVO();
|
|
||||||
searchVO.setSfield(sfield);
|
|
||||||
searchVO.setQuery(query);
|
|
||||||
searchVO.setCollection(collection);
|
|
||||||
}
|
|
||||||
|
|
||||||
if(!fromMenu && !isValidCsrfToken(request, csrfToken))
|
|
||||||
{
|
|
||||||
model.addAttribute("msg", "잘못된 접근입니다.");
|
|
||||||
model.addAttribute("url","/");
|
|
||||||
return "nlib/cmm/alert";
|
|
||||||
}
|
|
||||||
|
|
||||||
//검색엔진파라미터로 문화원코드
|
//검색엔진파라미터로 문화원코드
|
||||||
searchVO.setMngOrgCd(councilCd);
|
searchVO.setMngOrgCd(councilCd);
|
||||||
|
|
||||||
|
|||||||
@ -353,7 +353,7 @@
|
|||||||
<select name="mngOrgCd" id="mngOrgCd" title="문화원 선택">
|
<select name="mngOrgCd" id="mngOrgCd" title="문화원 선택">
|
||||||
<option value="">문화원 전체</option>
|
<option value="">문화원 전체</option>
|
||||||
<c:forEach var="deptList" items="${deptList }">
|
<c:forEach var="deptList" items="${deptList }">
|
||||||
<option value="<c:out value='${deptList.orgCd }" ><c:out value='${deptList.deptNm }'/></option>
|
<option value="<c:out value='${deptList.orgCd }'/>" ><c:out value='${deptList.deptNm }'/></option>
|
||||||
</c:forEach>
|
</c:forEach>
|
||||||
</select>
|
</select>
|
||||||
</div>
|
</div>
|
||||||
|
|||||||
@ -189,7 +189,7 @@ function fnTabMoveSch(collection){
|
|||||||
fnFilterSch();
|
fnFilterSch();
|
||||||
}
|
}
|
||||||
function fnFilterSch(){
|
function fnFilterSch(){
|
||||||
document.referencelistForm.action="/search/searchListCondition.do";
|
document.referencelistForm.action="/search/searchList.do";
|
||||||
document.referencelistForm.submit();
|
document.referencelistForm.submit();
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -209,7 +209,7 @@ function fn_search_article(pageIndex) {
|
|||||||
</script>
|
</script>
|
||||||
|
|
||||||
<!-- 소장자료 섹션 -->
|
<!-- 소장자료 섹션 -->
|
||||||
<form name="referencelistForm" id="referencelistForm" method="post" action="/search/searchListCondition.do">
|
<form name="referencelistForm" id="referencelistForm" method="post" action="/search/searchList.do">
|
||||||
<input type="hidden" name="collection" id="collection" value="<c:out value='${searchVO.collection}'/>" />
|
<input type="hidden" name="collection" id="collection" value="<c:out value='${searchVO.collection}'/>" />
|
||||||
<input type="hidden" id="pageIndex" name="pageIndex" title="페이지번호" value="<c:out value='${searchVO.pageIndex }' />"/>
|
<input type="hidden" id="pageIndex" name="pageIndex" title="페이지번호" value="<c:out value='${searchVO.pageIndex }' />"/>
|
||||||
<input type="hidden" id="masterId" name="masterId" value="" />
|
<input type="hidden" id="masterId" name="masterId" value="" />
|
||||||
|
|||||||
@ -381,12 +381,11 @@ function detailPopClose(){
|
|||||||
<span>검색어와, 검색조건들을 통해서 더 정확한 정보를 찾아보세요.</span>
|
<span>검색어와, 검색조건들을 통해서 더 정확한 정보를 찾아보세요.</span>
|
||||||
<span><a href="javascript:;" class="btn-close-pop" onclick="detailPopClose();"><img src="/images/btn/btn-pop-close.png" alt="닫기"></a></span>
|
<span><a href="javascript:;" class="btn-close-pop" onclick="detailPopClose();"><img src="/images/btn/btn-pop-close.png" alt="닫기"></a></span>
|
||||||
</div>
|
</div>
|
||||||
<form action="/search/searchListCondition.do" method="POST" id="d_referencelistForm" name="d_referencelistForm" class="mCustomScrollbar" data-mcs-theme="dark-2">
|
<form action="/search/searchList.do" method="POST" id="d_referencelistForm" name="d_referencelistForm" class="mCustomScrollbar" data-mcs-theme="dark-2">
|
||||||
<input type="hidden" id="d_filter_class" name="filter_class">
|
<input type="hidden" id="d_filter_class" name="filter_class">
|
||||||
<input type="hidden" id="d_filter_category" name="filter_category">
|
<input type="hidden" id="d_filter_category" name="filter_category">
|
||||||
<input type="hidden" id="d_filter_mylist" name="filter_mylist">
|
<input type="hidden" id="d_filter_mylist" name="filter_mylist">
|
||||||
<input type="hidden" id="d_filter_creatYyyy" name="filter_creatYyyy" value="">
|
<input type="hidden" id="d_filter_creatYyyy" name="filter_creatYyyy" value="">
|
||||||
<input type="hidden" id="csrfToken" name="csrfToken" value="<c:out value='${csrfToken}'/>">
|
|
||||||
<div class="scroll-wrap">
|
<div class="scroll-wrap">
|
||||||
<fieldset>
|
<fieldset>
|
||||||
<legend>상세검색 입력폼</legend>
|
<legend>상세검색 입력폼</legend>
|
||||||
|
|||||||
@ -409,8 +409,3 @@ function fnLabel_reference_detail(){
|
|||||||
$(checked2[i]).prop("checked", true);
|
$(checked2[i]).prop("checked", true);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
function fnFilterSch(){
|
|
||||||
document.referencelistForm.action="/search/searchListCondition.do";
|
|
||||||
document.referencelistForm.submit();
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user