diff --git a/src/framework/middleware/security/referer.go b/src/framework/middleware/security/referer.go index b716f7f4..f4e4ba2b 100644 --- a/src/framework/middleware/security/referer.go +++ b/src/framework/middleware/security/referer.go @@ -15,6 +15,9 @@ func referer(c *gin.Context) { if v := config.Get("security.csrf.enable"); v != nil { enable = v.(bool) } + if !enable { + return + } // csrf 校验类型 okType := false @@ -59,16 +62,15 @@ func referer(c *gin.Context) { } } - if enable && okType { - ok := false - for _, domain := range refererWhiteList { - if domain == host { - ok = true - } - } - if !ok { - c.AbortWithStatusJSON(200, result.ErrMsg("无效 Referer "+host)) - return + // 遍历检查 + ok := false + for _, domain := range refererWhiteList { + if domain == host { + ok = true } } + if !ok { + c.AbortWithStatusJSON(200, result.ErrMsg("无效 Referer "+host)) + return + } }