jiangyc/RuoYi-Vue-Plus
1
0
Fork 0
mirror of https://github.com/dromara/RuoYi-Vue-Plus.git synced 2025-09-24 07:19:46 +08:00
Code Issues Packages Projects Releases Wiki Activity

update 优化 全局开启xss过滤 提高安全性 与cloud版本保持一致

Browse Source
This commit is contained in:
疯狂的狮子Li
2024-09-13 18:02:44 +08:00
parent e33f76d710
commit fc72b67090
4 changed files with 17 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
ruoyi-admin/src/main/resources/application.yml
View File

@ -223,9 +223,10 @@ xss:
# 过滤开关
enabled: true
# 排除链接（多个用逗号分隔）
excludes: /system/notice
# 匹配链接
urlPatterns: /system/*,/monitor/*,/tool/*
excludeUrls:
- /system/notice
- /workflow/model/save
- /workflow/model/editModelXml
# 全局线程池相关配置
# 如使用JDK21请直接使用虚拟线程 不要开启此配置