somang4819/itsm_ysm
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

csrf 토큰 제거 submit을 jsp내로 옮김

Browse Source
This commit is contained in:
JSYOO 2021-12-15 10:02:48 +09:00
parent 31a3eedc58
commit 220e8f7ba9
5 changed files with 5 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
src/main/java/nlib/sch/web/NlibSearchController.java
View File

@ -90,7 +90,7 @@ public class NlibSearchController extends NlibCommonController {
* @param req
* @return
*/
@RequestMapping(value = {"/search/searchList.do", "/search/searchListCondition.do"} )
@RequestMapping(value = {"/search/searchList.do"} )
public String searchList(
HttpServletRequest req
, Authentication authentication
@ -102,25 +102,6 @@ public class NlibSearchController extends NlibCommonController {
HttpSession session = request.getSession();
String councilCd = (String)session.getAttribute("councilCd");
boolean fromMenu = request.getServletPath().contains("/search/searchList.do");
if(fromMenu) {
String sfield = searchVO.getSfield();
String query = searchVO.getQuery();
String collection = searchVO.getCollection();
searchVO = new NlibSearchVO();
searchVO.setSfield(sfield);
searchVO.setQuery(query);
searchVO.setCollection(collection);
}
if(!fromMenu && !isValidCsrfToken(request, csrfToken))
{
model.addAttribute("msg", "잘못된 접근입니다.");
model.addAttribute("url","/");
return "nlib/cmm/alert";
}
//검색엔진파라미터로 문화원코드
searchVO.setMngOrgCd(councilCd);

2
src/main/webapp/WEB-INF/jsp/nlib/collection/listInterests.jsp
View File

@ -353,7 +353,7 @@
<select name="mngOrgCd" id="mngOrgCd" title="문화원 선택">
<option value="">문화원 전체</option>
<c:forEach var="deptList" items="${deptList }">
<option value="<c:out value='${deptList.orgCd }" ><c:out value='${deptList.deptNm }'/></option>
<option value="<c:out value='${deptList.orgCd }'/>" ><c:out value='${deptList.deptNm }'/></option>
</c:forEach>
</select>
</div>

4
src/main/webapp/WEB-INF/jsp/nlib/collection/searchList.jsp
View File

@ -189,7 +189,7 @@ function fnTabMoveSch(collection){
fnFilterSch();
}
function fnFilterSch(){
document.referencelistForm.action="/search/searchListCondition.do";
document.referencelistForm.action="/search/searchList.do";
document.referencelistForm.submit();
}
@ -209,7 +209,7 @@ function fn_search_article(pageIndex) {
</script>
<!-- 소장자료 섹션 -->
<form name="referencelistForm" id="referencelistForm" method="post" action="/search/searchListCondition.do">
<form name="referencelistForm" id="referencelistForm" method="post" action="/search/searchList.do">
<input type="hidden" name="collection" id="collection" value="<c:out value='${searchVO.collection}'/>" />
<input type="hidden" id="pageIndex" name="pageIndex" title="페이지번호" value="<c:out value='${searchVO.pageIndex }' />"/>
<input type="hidden" id="masterId" name="masterId" value="" />

3
src/main/webapp/WEB-INF/jsp/nlib/search/getDetailedSearchFormPopup.jsp
View File

@ -381,12 +381,11 @@ function detailPopClose(){
<span>검색어와, 검색조건들을 통해서 더 정확한 정보를 찾아보세요.</span>
<span><a href="javascript:;" class="btn-close-pop" onclick="detailPopClose();"><img src="/images/btn/btn-pop-close.png" alt="닫기"></a></span>
</div>
<form action="/search/searchListCondition.do" method="POST" id="d_referencelistForm" name="d_referencelistForm" class="mCustomScrollbar" data-mcs-theme="dark-2">
<form action="/search/searchList.do" method="POST" id="d_referencelistForm" name="d_referencelistForm" class="mCustomScrollbar" data-mcs-theme="dark-2">
<input type="hidden" id="d_filter_class" name="filter_class">
<input type="hidden" id="d_filter_category" name="filter_category">
<input type="hidden" id="d_filter_mylist" name="filter_mylist">
<input type="hidden" id="d_filter_creatYyyy" name="filter_creatYyyy" value="">
<input type="hidden" id="csrfToken" name="csrfToken" value="<c:out value='${csrfToken}'/>">
<div class="scroll-wrap">
<fieldset>
<legend>상세검색 입력폼</legend>

5
src/main/webapp/js/search/reference.js
View File

@ -409,8 +409,3 @@ function fnLabel_reference_detail(){
$(checked2[i]).prop("checked", true);
}
}
function fnFilterSch(){
document.referencelistForm.action="/search/searchListCondition.do";
document.referencelistForm.submit();
}