From 00ec6eca85b4ecad58be6c644596d875034c2af7 Mon Sep 17 00:00:00 2001
From: zane <zane0312@foxmail.com>
Date: Thu, 26 Sep 2024 17:51:36 +0800
Subject: [PATCH] =?UTF-8?q?=E4=B8=8A=E4=BC=A0=E5=85=B3=E8=81=94?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../service/collect/RelCodeBatchService.java  | 21 +++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

diff --git a/src/main/java/com/glxp/api/service/collect/RelCodeBatchService.java b/src/main/java/com/glxp/api/service/collect/RelCodeBatchService.java
index 909fd4e00..41c1d6646 100644
--- a/src/main/java/com/glxp/api/service/collect/RelCodeBatchService.java
+++ b/src/main/java/com/glxp/api/service/collect/RelCodeBatchService.java
@@ -39,19 +39,25 @@ public class RelCodeBatchService extends ServiceImpl<RelCodeBatchMapper, RelCode
      */
     @Transactional(rollbackFor = Exception.class)
     public void xmlUpload(MultipartFile file) {
-        String fileName = file.getOriginalFilename();
-        String suffix = FileUtil.getSuffix(fileName);
-        if(! "xml".equals(suffix)){
-            throw new JsonException("上传文件类型错误:"+suffix);
-        }
-        log.info(file.getSize()+"文件长度");
         try {
+            String fileName = file.getOriginalFilename();
+            String suffix = FileUtil.getSuffix(fileName);
+            if(! "xml".equals(suffix)){
+                throw new JsonException("仅支持XML，文件类型错误"+suffix);
+            }
+            log.info(file.getSize()+"文件长度");
+            if(file.getSize() > 5 * 1024 *1024){
+                throw new JsonException("上传文件超过5M");
+            }
             List<RelCodeDetail> relCodeDetails = new ArrayList<>();
             Document document = XmlUtil.readXML(file.getInputStream());
             //获取根
             Element rootElement = XmlUtil.getRootElement(document);
             //截取Relation
             NodeList relation = rootElement.getElementsByTagName("Relation");
+            if(relation == null){
+                throw new JsonException("XML文件解析错误");
+            }
             Element relationE = (Element) relation.item(0);
             String productCode = relationE.getAttribute("productCode");
             String subTypeNo = relationE.getAttribute("subTypeNo");
@@ -60,6 +66,9 @@ public class RelCodeBatchService extends ServiceImpl<RelCodeBatchMapper, RelCode
             String comment = relationE.getAttribute("comment");
             //截取Batch
             NodeList batch = rootElement.getElementsByTagName("Batch");
+            if(batch == null){
+                throw new JsonException("XML文件解析错误");
+            }
             for (int i = 0; i < batch.getLength(); i++) {
                 Node batchNode = batch.item(i);
                 RelCodeBatch relCodeBatch = new RelCodeBatch();