修复获取售后信息无权限问题，修复xss忽略过滤转义问题

2021-11-16 16:55:58 +08:00
parent e218738fda
commit 2765dd8fd9
3 changed files with 4 additions and 5 deletions
--- a/buyer-api/src/main/java/cn/lili/controller/trade/AfterSaleBuyerController.java
+++ b/buyer-api/src/main/java/cn/lili/controller/trade/AfterSaleBuyerController.java
@@ -74,8 +74,7 @@ public class AfterSaleBuyerController {
    })
    @GetMapping(value = "/applyAfterSaleInfo/{sn}")
    public ResultMessage<AfterSaleApplyVO> applyAfterSaleInfo(@PathVariable String sn) {
-        AfterSaleApplyVO afterSaleApplyVO = OperationalJudgment.judgment(afterSaleService.getAfterSaleVO(sn));
-        return ResultUtil.data(afterSaleApplyVO);
+        return ResultUtil.data(afterSaleService.getAfterSaleVO(sn));
    }

    @PostMapping(value = "/save/{orderItemSn}")