Merge branch 'master' of github.com:kaopur/yii2-doc-online

Author: coder-liyang

src/ApiDesc.php

@@ -76,7 +76,7 @@ public function render() {
             $pos = stripos($comment, '@param');
             if ($pos !== FALSE) {
                 $paramArr = explode(' ', trim(substr($comment, $pos + 7)), 3);
-                $rules[$paramArr[0]] = $paramArr;
+                $rules[] = $paramArr;
                 continue;
             }
 

tpl/api_desc_tpl.php

@@ -57,15 +57,15 @@
 
 foreach ($rules as $key => $rule) {
     $name = isset($rule['1'])?ltrim($rule['1'], '$'):'';
-    if (!isset($rule['type'])) {
+    if (!isset($rule['0'])) {
         $rule['type'] = 'string';
     }
     $type = isset($typeMaps[$rule[0]]) ? $typeMaps[$rule[0]] : $rule[0];
     $content_require_desc_String = isset($rule[2])?trim($rule[2], '|'):'';
     $content_require_desc_Arr = explode('|', $content_require_desc_String);
     $content = isset($content_require_desc_Arr[0])?$content_require_desc_Arr[0]:'无';
     $require = isset($content_require_desc_Arr[1]) && $content_require_desc_Arr[1]=='yes'?'<font color="red">必须</font>':'可选';
-    $desc = isset($content_require_desc_Arr[2])?$content_require_desc_Arr[2]:'无';
+    $desc = isset($content_require_desc_Arr[2])?htmlentities($content_require_desc_Arr[2]):'无';
 
     echo "<tr><td>$name</td><td>$type</td><td>$require</td><td>$content</td><td>$desc</td></tr>\n";
 }
@@ -189,6 +189,7 @@
 /**
  * 底部
  */
+$_csrf = \Yii::$app->request->getCsrfToken();
 echo <<<EOT
         <div class="ui blue message">
           <strong>温馨提示：</strong> 此接口参数列表根据后台代码自动生成，可将 ?r= 改成您需要查询的接口/服务
@@ -204,6 +205,9 @@ function getData() {
                     data[e.name] = e.value;
                 }
             });
+            if ($("select").val() == 'POST') {
+                data['_csrf'] = "$_csrf";
+            }
             return data;
         }