From fcc6feab487ec1e65a32577f263add0ee06d8a6e Mon Sep 17 00:00:00 2001
From: zhongrj <646384940@qq.com>
Date: Mon, 25 Mar 2024 12:43:49 +0800
Subject: [PATCH] 安全漏洞修复
---
src/main/resources/application.yml | 10 ++++++++++
1 files changed, 10 insertions(+), 0 deletions(-)
diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml
index 77df676..76a1fa0 100644
--- a/src/main/resources/application.yml
+++ b/src/main/resources/application.yml
@@ -41,6 +41,9 @@
exclusions: '*.js,*.gif,*.jpg,*.bmp,*.png,*.css,*.ico,/druid/*'
session-stat-enable: true
session-stat-max-count: 10
+ servlet:
+ multipart:
+ location: D:\tmp\undertow
# mybatis
@@ -161,6 +164,7 @@
token:
#是否有状态
state: false
+ sign-key: CJ0ZW5hbnRfaWQiOiIwMDAwMDAiLCJ1c2VyX25hbWUiOiIxNTE3MDcyMDY5NSIsInJlYWxfbmFtZSI6Inpob25nIiwidG9rZW5fdHlwZSI6ImFjY2Vzc190b2tlbiIsInJvbGVfbmFtZSI
#redis序列化方式
redis:
serializer-type: protostuff
@@ -188,10 +192,13 @@
skip-url:
- /blade-chat/weixin
- /blade-desk/notice/submit
+ - /exam/examinationNote/save
+ - /exam/examinationNote/update
#安全框架配置
secure:
#接口放行
skip-url:
+ - /test/**
- /blade-test/**
- /blade-system/dept/selectInfo
- /blade-user/zc
@@ -225,6 +232,9 @@
- /blade-user/getNotUpdatePwdInfo
- /attendance/AppSave
- /electronRail/**
+ - /scheduled/**
+ - /rabbitmq/**
+ - /examSubjectChoices/**
#授权认证配置
auth:
--
Gitblit v1.9.3