..

src/main/java/com/budwk/app/web/commons/auth/service/AuthService.java

@@ -1,6 +1,7 @@
 package com.budwk.app.web.commons.auth.service;
 
 import cn.dev33.satoken.stp.StpUtil;
+import com.budwk.app.sys.models.Sys_menu;
 import com.budwk.app.sys.models.Sys_user;
 import com.budwk.app.sys.services.SysUserService;
 import com.budwk.app.web.commons.auth.utils.SecurityUtil;
@@ -12,6 +13,7 @@ import org.nutz.json.Json;
 import java.beans.BeanInfo;
 import java.beans.Introspector;
 import java.beans.PropertyDescriptor;
+import java.util.List;
 
 /**
  * @author wizzer@qq.com
@@ -59,4 +61,10 @@ public class AuthService {
     public String getSessionId() {
         return StpUtil.getTokenValue();
     }
+
+    public Object getSubAppMenus(String appId) {
+        List<Sys_menu> menus = sysUserService.getMenus(SecurityUtil.getUserId());
+        List<Sys_menu> pcTreeMenus = Sys_menu.createTreeMenus(menus, appId);
+        return pcTreeMenus;
+    }
 }

src/main/java/com/budwk/app/web/commons/proc/XssSqlFilterProcessor.java

@@ -56,15 +56,15 @@ public class XssSqlFilterProcessor extends AbstractProcessor {
     }
 
     public void process(ActionContext ac) throws Throwable {
-        if (checkUrl(ac) && checkParams(ac)) {
-            if (WebUtil.isAjax(ac.getRequest())) {
-                ac.getResponse().addHeader("loginStatus", "paramsDenied");
-                WebUtil.rendAjaxResp(ac.getRequest(), ac.getResponse(), Result.error(Mvcs.getMessage(ac.getRequest(), "system.paramserror")));
-            } else {
-                new ForwardView(lerrorUri).render(ac.getRequest(), ac.getResponse(), Mvcs.getMessage(ac.getRequest(), "system.paramserror"));
-            }
-            return;
-        }
+//        if (checkUrl(ac) && checkParams(ac)) {
+//            if (WebUtil.isAjax(ac.getRequest())) {
+//                ac.getResponse().addHeader("loginStatus", "paramsDenied");
+//                WebUtil.rendAjaxResp(ac.getRequest(), ac.getResponse(), Result.error(Mvcs.getMessage(ac.getRequest(), "system.paramserror")));
+//            } else {
+//                new ForwardView(lerrorUri).render(ac.getRequest(), ac.getResponse(), Mvcs.getMessage(ac.getRequest(), "system.paramserror"));
+//            }
+//            return;
+//        }
         doNext(ac);
     }