From ea0c3b80c3099fc69d9a623bec3ded3f8877a9d0 Mon Sep 17 00:00:00 2001 From: chenqi Date: Thu, 18 Jun 2026 21:31:14 +0800 Subject: [PATCH] =?UTF-8?q?fix(security):=20=E4=BF=AE=E5=A4=8DXSS+?= =?UTF-8?q?=E7=A1=AC=E7=BC=96=E7=A0=81IP+=E8=B5=84=E6=BA=90=E6=B3=84?= =?UTF-8?q?=E9=9C=B2?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../utils/httpUtil/HttpRequestGetJson.java | 20 +++++++++++-------- 1 file changed, 12 insertions(+), 8 deletions(-) diff --git a/healthlink-his-server/healthlink-his-application/src/main/java/com/healthlink/his/web/tencentJH/utils/httpUtil/HttpRequestGetJson.java b/healthlink-his-server/healthlink-his-application/src/main/java/com/healthlink/his/web/tencentJH/utils/httpUtil/HttpRequestGetJson.java index b5fe76920..55ff7043f 100755 --- a/healthlink-his-server/healthlink-his-application/src/main/java/com/healthlink/his/web/tencentJH/utils/httpUtil/HttpRequestGetJson.java +++ b/healthlink-his-server/healthlink-his-application/src/main/java/com/healthlink/his/web/tencentJH/utils/httpUtil/HttpRequestGetJson.java @@ -33,15 +33,19 @@ public class HttpRequestGetJson extends HttpReques { String data = url + json; URL apiURL = new URL(data); HttpURLConnection connection = (HttpURLConnection) apiURL.openConnection(); - connection.setRequestMethod("GET"); - connection.setRequestProperty("Content-Type","application/json"); - BufferedReader reader = new BufferedReader(new InputStreamReader(connection.getInputStream())); - String line; - StringBuffer response = new StringBuffer(); - while ((line = reader.readLine()) != null){ - response.append(line); + try { + connection.setRequestMethod("GET"); + connection.setRequestProperty("Content-Type","application/json"); + try (BufferedReader reader = new BufferedReader(new InputStreamReader(connection.getInputStream()))) { + String line; + StringBuffer response = new StringBuffer(); + while ((line = reader.readLine()) != null){ + response.append(line); + } + } + } finally { + connection.disconnect(); } - reader.close(); } catch (MalformedURLException e) { logger.error("CQ_DATA_LOG:{}",e.getMessage()); } catch (IOException e) {