java - Liferay : [SecurityPortletContainerWrapper:630] Reject process action

Question

我正在尝试在 Liferay 中上传文件，但我厌倦了上传“大”文件大小(超过 2MB)。带日志

[SecurityPortletContainerWrapper:630] Reject process action

<%@ include file="/init.jsp"%>
<portlet:actionURL var="intergrateURL" name="intergrate" />
<aui:form method="post" action="<%=intergrateURL.toString() %>" 
enctype="multipart/form-data">
     <aui:input name="messagContent1" />
     <aui:input name="messagContent2" />
     <aui:input name="uploadFileHere" type="file"/>
     <aui:button value="submit" type="submit"/>
</aui:form>

Portlet 操作:

public class IntergratePortlet extends MVCPortlet {

public void intergrate(ActionRequest actionRequest,
        ActionResponse actionResponse) {

    UploadPortletRequest uploadPortletRequest = PortalUtil
            .getUploadPortletRequest(actionRequest);

    String messageContent1 = uploadPortletRequest.getFullFileName("uploadFileHere");
    String messageContent2 = ParamUtil.getString(actionRequest,
            "messagContent2");

    InputStream fileInputStream = null;
    byte[] fileByteArray; 

    MessageContentBean messageContentBean = new MessageContentBean();

    messageContentBean.setMessageContent1(messageContent1);
    messageContentBean.setMessageContent2(messageContent2);

    try {
        fileInputStream = uploadPortletRequest.getFileAsStream("uploadFileHere");
        fileByteArray = ReceiveMessage.convertInputStreamToByteArray(fileInputStream);
        messageContentBean.setFileMessage(fileByteArray);
    } catch (IOException e) {
        e.printStackTrace();
    }
    SendJmsMessage sendJmsMessage = new SendJmsMessage();
    sendJmsMessage.doSendMessage("103.74.121.22", messageContentBean);
    // sendJmsMessage.doSendMessage("127.0.0.1", messageContentBean);
}

}

Answer 1

有 2 个选项:

选项 1:

将以下内容添加到您的 portlet.xml 以禁用 liferay 的 csrf 保护:

    <init-param>
        <name>check-auth-token</name>
        <value>false</value>
    </init-param>

选项 2:

更改 ${liferay_installed_dir}/portal-ext.properties 以添加以下内容:

auth.token.ignore.portlets=${form}_WAR_${portlet}

建议您使用“选项1”，具体可以引用this post 。

如何禁用每个 Action 的CSRF，请使用关键词搜索liferay官方文档/wiki:

• “portlet.add.default.resource.check.whitelist”
• “portlet.add.default.resource.check.whitelist.action”