Merge branch 'master' of https://github.com/metersphere/metersphere

2021-03-10 17:23:03 +08:00 · 2021-03-10 17:23:03 +08:00 · 75c4e672f6
parent 78db8d3b59 7c40fa3377
commit 75c4e672f6
1 changed files with 1 additions and 0 deletions
--- a/backend/src/main/java/io/metersphere/security/CsrfFilter.java
+++ b/backend/src/main/java/io/metersphere/security/CsrfFilter.java
@ -26,6 +26,7 @@ public class CsrfFilter extends AnonymousFilter {

        if (!SecurityUtils.getSubject().isAuthenticated()) {
            ((HttpServletResponse) response).setHeader("Authentication-Status", "invalid");
+            return true;
        }
        // api 过来的请求
        if (ApiKeyHandler.isApiKeyCall(WebUtils.toHttp(request))) {