防止jsencrypt非压缩模块打包的时候导致的安全问题

Signed-off-by: ArvinHuang <[email protected]>
FederatedAI · Jul 13, 2023 · 613a7ae · 613a7ae
1 parent a31003d
commit 613a7ae
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 9 deletions.
diff --git a/resources-front-end/index.html b/resources-front-end/index.html
@@ -8,5 +8,6 @@
   <body>
     <div id="app"></div>
     <!-- built files will be auto injected -->
+    <script src="./static/jsencrypt.min.js"></script>
   </body>
 </html>
diff --git a/resources-front-end/package.json b/resources-front-end/package.json
@@ -22,8 +22,6 @@
     "file-saver": "^2.0.1",
     "hmac_sha1": "^0.1.1",
     "js-cookie": "2.2.0",
-    "jsencrypt": "^3.2.1",
-    "jsencrypter": "^1.2.1",
     "jszip": "^3.7.1",
     "lodash": "^4.17.21",
     "mockjs": "1.0.1-beta3",

diff --git a/resources-front-end/src/utils/encrypt.js b/resources-front-end/src/utils/encrypt.js
@@ -1,7 +1,9 @@
-import { JSEncrypt } from 'jsencrypt'
-
-export default function rsa(publicKet, origin) {
-  const jsencrypt = new JSEncrypt()
-  jsencrypt.setPublicKey(publicKet)
-  return jsencrypt.encrypt(origin)
-}
+export default function rsa(publicKet, origin) {
+  if (window.JSEncrypt) {
+    const jsencrypt = new window.JSEncrypt()
+    jsencrypt.setPublicKey(publicKet)
+    return jsencrypt.encrypt(origin)
+  } else {
+    return origin
+  }
+}
diff --git a/resources-front-end/static/jsencrypt.min.js b/resources-front-end/static/jsencrypt.min.js