csrf 토큰 제거 submit을 jsp내로 옮김

This commit is contained in:
JSYOO 2021-12-15 10:02:48 +09:00
parent 31a3eedc58
commit 220e8f7ba9
5 changed files with 5 additions and 30 deletions

View File

@ -90,7 +90,7 @@ public class NlibSearchController extends NlibCommonController {
* @param req * @param req
* @return * @return
*/ */
@RequestMapping(value = {"/search/searchList.do", "/search/searchListCondition.do"} ) @RequestMapping(value = {"/search/searchList.do"} )
public String searchList( public String searchList(
HttpServletRequest req HttpServletRequest req
, Authentication authentication , Authentication authentication
@ -102,25 +102,6 @@ public class NlibSearchController extends NlibCommonController {
HttpSession session = request.getSession(); HttpSession session = request.getSession();
String councilCd = (String)session.getAttribute("councilCd"); String councilCd = (String)session.getAttribute("councilCd");
boolean fromMenu = request.getServletPath().contains("/search/searchList.do");
if(fromMenu) {
String sfield = searchVO.getSfield();
String query = searchVO.getQuery();
String collection = searchVO.getCollection();
searchVO = new NlibSearchVO();
searchVO.setSfield(sfield);
searchVO.setQuery(query);
searchVO.setCollection(collection);
}
if(!fromMenu && !isValidCsrfToken(request, csrfToken))
{
model.addAttribute("msg", "잘못된 접근입니다.");
model.addAttribute("url","/");
return "nlib/cmm/alert";
}
//검색엔진파라미터로 문화원코드 //검색엔진파라미터로 문화원코드
searchVO.setMngOrgCd(councilCd); searchVO.setMngOrgCd(councilCd);

View File

@ -353,7 +353,7 @@
<select name="mngOrgCd" id="mngOrgCd" title="문화원 선택"> <select name="mngOrgCd" id="mngOrgCd" title="문화원 선택">
<option value="">문화원 전체</option> <option value="">문화원 전체</option>
<c:forEach var="deptList" items="${deptList }"> <c:forEach var="deptList" items="${deptList }">
<option value="<c:out value='${deptList.orgCd }" ><c:out value='${deptList.deptNm }'/></option> <option value="<c:out value='${deptList.orgCd }'/>" ><c:out value='${deptList.deptNm }'/></option>
</c:forEach> </c:forEach>
</select> </select>
</div> </div>

View File

@ -189,7 +189,7 @@ function fnTabMoveSch(collection){
fnFilterSch(); fnFilterSch();
} }
function fnFilterSch(){ function fnFilterSch(){
document.referencelistForm.action="/search/searchListCondition.do"; document.referencelistForm.action="/search/searchList.do";
document.referencelistForm.submit(); document.referencelistForm.submit();
} }
@ -209,7 +209,7 @@ function fn_search_article(pageIndex) {
</script> </script>
<!-- 소장자료 섹션 --> <!-- 소장자료 섹션 -->
<form name="referencelistForm" id="referencelistForm" method="post" action="/search/searchListCondition.do"> <form name="referencelistForm" id="referencelistForm" method="post" action="/search/searchList.do">
<input type="hidden" name="collection" id="collection" value="<c:out value='${searchVO.collection}'/>" /> <input type="hidden" name="collection" id="collection" value="<c:out value='${searchVO.collection}'/>" />
<input type="hidden" id="pageIndex" name="pageIndex" title="페이지번호" value="<c:out value='${searchVO.pageIndex }' />"/> <input type="hidden" id="pageIndex" name="pageIndex" title="페이지번호" value="<c:out value='${searchVO.pageIndex }' />"/>
<input type="hidden" id="masterId" name="masterId" value="" /> <input type="hidden" id="masterId" name="masterId" value="" />

View File

@ -381,12 +381,11 @@ function detailPopClose(){
<span>검색어와, 검색조건들을 통해서 더 정확한 정보를 찾아보세요.</span> <span>검색어와, 검색조건들을 통해서 더 정확한 정보를 찾아보세요.</span>
<span><a href="javascript:;" class="btn-close-pop" onclick="detailPopClose();"><img src="/images/btn/btn-pop-close.png" alt="닫기"></a></span> <span><a href="javascript:;" class="btn-close-pop" onclick="detailPopClose();"><img src="/images/btn/btn-pop-close.png" alt="닫기"></a></span>
</div> </div>
<form action="/search/searchListCondition.do" method="POST" id="d_referencelistForm" name="d_referencelistForm" class="mCustomScrollbar" data-mcs-theme="dark-2"> <form action="/search/searchList.do" method="POST" id="d_referencelistForm" name="d_referencelistForm" class="mCustomScrollbar" data-mcs-theme="dark-2">
<input type="hidden" id="d_filter_class" name="filter_class"> <input type="hidden" id="d_filter_class" name="filter_class">
<input type="hidden" id="d_filter_category" name="filter_category"> <input type="hidden" id="d_filter_category" name="filter_category">
<input type="hidden" id="d_filter_mylist" name="filter_mylist"> <input type="hidden" id="d_filter_mylist" name="filter_mylist">
<input type="hidden" id="d_filter_creatYyyy" name="filter_creatYyyy" value=""> <input type="hidden" id="d_filter_creatYyyy" name="filter_creatYyyy" value="">
<input type="hidden" id="csrfToken" name="csrfToken" value="<c:out value='${csrfToken}'/>">
<div class="scroll-wrap"> <div class="scroll-wrap">
<fieldset> <fieldset>
<legend>상세검색 입력폼</legend> <legend>상세검색 입력폼</legend>

View File

@ -409,8 +409,3 @@ function fnLabel_reference_detail(){
$(checked2[i]).prop("checked", true); $(checked2[i]).prop("checked", true);
} }
} }
function fnFilterSch(){
document.referencelistForm.action="/search/searchListCondition.do";
document.referencelistForm.submit();
}