浏览代码

漏洞修复-fs-admin 直接返回未脱敏完整身份证号)

wjj 2 天之前
父节点
当前提交
bba190ecf9
共有 1 个文件被更改,包括 3 次插入0 次删除
  1. 3 0
      fs-admin/src/main/java/com/fs/his/controller/FsPrescribeController.java

+ 3 - 0
fs-admin/src/main/java/com/fs/his/controller/FsPrescribeController.java

@@ -184,6 +184,9 @@ public class FsPrescribeController extends BaseController
     {
         FsPatient fsPatient = fsPatientMapper.selectFsPatientByPatientId(orderId);
         String idCard = fsPatient.getIdCard();
+        if (idCard != null) {
+            idCard = idCard.replaceAll("(\\d{4})\\d{10}(\\w{4})", "$1**********$2");
+        }
         return R.ok().put("data",idCard);
     }