参数赋值，漏洞修复

futian.liu

2023-11-28 c29479a57db73c4dd379788d1b819e716ff7e1c1

 consum-base/src/main/java/com/consum/base/controller/BaseWarehouseManagerController.java

@@ -1,6 +1,7 @@
package com.consum.base.controller;

import com.consum.base.BaseController;
import com.consum.base.core.utils.CommonUtil;
import com.consum.base.pojo.request.WarehouseManagerParam;
import com.consum.base.service.BaseWarehouseManagerServiceImpl;
import com.consum.model.po.BaseWarehouseManager;
@@ -13,7 +14,6 @@
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

@@ -39,12 +39,17 @@
    @ApiOperation(value = "新增", notes = "新增")
    @ApiImplicitParam(name = "warehouseManagerParam", value = "库管员信息", required = true, dataType = "WarehouseManagerParam", paramType = "body")
    @PostMapping("/save")
    public ResponseValue add(@RequestBody WarehouseManagerParam warehouseManagerParam) throws Exception {
    public ResponseValue add() throws Exception {
        WarehouseManagerParam param = CommonUtil.getObjFromReqBody(WarehouseManagerParam.class);
        WarehouseManagerParam baseWarehouseParam = new WarehouseManagerParam();
        CommonUtil.copyProperties(param, baseWarehouseParam);
        param = baseWarehouseParam;

        FinSysTenantUser sysInfo = this.getSysInfo();
        if (sysInfo == null) {
            return ResponseValue.error("请先登录");
        }
        this.baseWarehouseManagerService.add(warehouseManagerParam);
        this.baseWarehouseManagerService.add(param);
        return ResponseValue.success();
    }