From ac6aafcdc4935e9f8fb931a904182eab8c5c7281 Mon Sep 17 00:00:00 2001
From: liangkun <liangkun7173@hotmail.com>
Date: Mon, 11 Sep 2023 09:35:34 +0800
Subject: [PATCH] =?UTF-8?q?UEditor=20catchimage=20source[]=20=E6=BC=8F?=
 =?UTF-8?q?=E6=B4=9E=E5=A4=84=E7=90=86?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../Learun.Application.Web/Controllers/UtilityController.cs | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/Learun.Framework.Ultimate V7/Learun.Application.Web/Controllers/UtilityController.cs b/Learun.Framework.Ultimate V7/Learun.Application.Web/Controllers/UtilityController.cs
index 6151dc105..9b2f535b3 100644
--- a/Learun.Framework.Ultimate V7/Learun.Application.Web/Controllers/UtilityController.cs	
+++ b/Learun.Framework.Ultimate V7/Learun.Application.Web/Controllers/UtilityController.cs	
@@ -95,7 +95,11 @@ namespace Learun.Application.Web.Controllers
                 case "listfile":
                     return ListFileManager(UeditorConfig.GetString("fileManagerListPath"), UeditorConfig.GetStringList("fileManagerAllowFiles"));
                 case "catchimage":
-                    return CrawlerHandler();
+                    //return CrawlerHandler();存在漏洞
+                    return Content(new
+                    {
+                        state = "action 参数为空或者 action 不被支持。"
+                    }.ToJson());
                 default:
                     return Content(new
                     {