文本文档加入缓存，安全修复XSS，美化404、500报错等，新增SVG格式预览，ofd优化印章渲染兼容性 (#413)

1、文本文档加入缓存 2、安全修复XSS(跨站脚本攻击) 3、美化404、500报错等 5、新增 SVG格式预览 5、ofd优化印章渲染兼容性 Co-authored-by: gaoxiongzaq <admin@cxcp.com>
2022-12-16 23:58:26 +08:00
parent bb63808767
commit 8c6f5bf807
19 changed files with 41477 additions and 40965 deletions
--- a/server/src/main/resources/web/svg.ftl
+++ b/server/src/main/resources/web/svg.ftl
@ -0,0 +1,51 @@
+<!DOCTYPE HTML>
+<html>
+<head>
+<title>${file.name}文件预览</title>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no" />
+<#include "*/commonHeader.ftl">
+<script src="js/svg-pan-zoom.js"></script>
+<#if currentUrl?contains("http://") || currentUrl?contains("https://") || currentUrl?contains("ftp://")>
+    <#assign finalUrl="${currentUrl}">
+<#else>
+    <#assign finalUrl="${baseUrl}${currentUrl}">
+</#if>
+</head>
+<body>
+<div id="container">
+</div>
+<script type="text/javascript">
+     
+	var url = '${finalUrl}';
+    var baseUrl = '${baseUrl}'.endsWith('/') ? '${baseUrl}' : '${baseUrl}' + '/';
+    if (!url.startsWith(baseUrl)) {
+        url = baseUrl + 'getCorsFile?urlPath=' + encodeURIComponent(Base64.encode(url));
+    }
+	 
+      function createNewEmbed(src){
+	  var lastEventListener = null;
+	  var gaodu1 =$(document).height();
+	  var gaodu=gaodu1-5; 
+          var embed = document.createElement('embed');
+          embed.setAttribute('style', 'width: 99%; height: '+gaodu+'px; border:1px solid black;');
+          embed.setAttribute('type', 'image/svg+xml');
+          embed.setAttribute('src', src);
+		  $('#container').html(embed);
+         lastEventListener = function(){
+            svgPanZoom(embed, {
+              zoomEnabled: true,
+              controlIconsEnabled: true
+            });
+          }
+          embed.addEventListener('load', lastEventListener)
+          return embed;
+        }
+		createNewEmbed(url);
+  /*初始化水印*/
+    window.onload = function () {
+        initWaterMark();
+    }
+</script>
+</body>
+</html>