diff --git a/app/Http/Middleware/Admin/ValidateReferer.php b/app/Http/Middleware/Admin/ValidateReferer.php index 5029d29..f883d17 100644 --- a/app/Http/Middleware/Admin/ValidateReferer.php +++ b/app/Http/Middleware/Admin/ValidateReferer.php @@ -13,16 +13,19 @@ class ValidateReferer /** * Handle an incoming request. * - * @param Request $request + * @param Request $request * @param Closure(Request): (Response|RedirectResponse) $next + * * @return mixed */ public function handle(Request $request, Closure $next): mixed { - // return $next($request); + if (app()->environment('local')) { + return $next($request); + } // 如果 referer 不为空,且不是来自本站的请求,则返回 403 - if ($request->headers->get('referer') && ! Str::contains($request->headers->get('referer'), config('app.url'))) { + if ($request->headers->get('referer') && !Str::contains($request->headers->get('referer'), config('app.url'))) { abort(403, '来源不属于后台。'); } else { return $next($request);