42 lines
1.5 KiB
C#
42 lines
1.5 KiB
C#
|
using System.Net;
|
|||
|
|
using System.Web.Helpers;
|
|||
|
|
using System.Web.Mvc;
|
|||
|
|
|
|||
|
|
namespace Learun.Application.Web
|
|||
|
|
{
|
|||
|
|
/// <summary>
|
|||
|
|
/// 版 本 PIT-ADMS V7.0.3 敏捷开发框架
|
|||
|
|
/// Copyright (c) 2013-2018 Hexagon PPM
|
|||
|
|
/// 创建人：-框架开发组
|
|||
|
|
/// 日 期：2017.03.08
|
|||
|
|
/// 描 述：防伪验证
|
|||
|
|
/// </summary>
|
|||
|
|
public class HandlerValidateAntiForgeryTokenAttribute:AuthorizeAttribute
|
|||
|
|
{
|
|||
|
|
/// <summary>
|
|||
|
|
/// 拦截器
|
|||
|
|
/// </summary>
|
|||
|
|
/// <param name="filterContext">http上下文</param>
|
|||
|
|
public override void OnAuthorization(AuthorizationContext filterContext)
|
|||
|
|
{
|
|||
|
|
var request = filterContext.HttpContext.Request;
|
|||
|
|
if (request.HttpMethod == WebRequestMethods.Http.Post)
|
|||
|
|
{
|
|||
|
|
if (request.IsAjaxRequest())
|
|||
|
|
{
|
|||
|
|
var antiForgeryCookie = request.Cookies[AntiForgeryConfig.CookieName];
|
|||
|
|
var cookieValue = antiForgeryCookie != null
|
|||
|
|
? antiForgeryCookie.Value
|
|||
|
|
: null;
|
|||
|
|
//从cookies 和 Headers 中 验证防伪标记
|
|||
|
|
//这里可以加try-catch
|
|||
|
|
AntiForgery.Validate(cookieValue, request.Headers["__RequestVerificationToken"]);
|
|||
|
|
}
|
|||
|
|
else
|
|||
|
|
{
|
|||
|
|
new ValidateAntiForgeryTokenAttribute().OnAuthorization(filterContext);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|