diff --git a/src/main/java/net/mingsoft/config/WebConfig.java b/src/main/java/net/mingsoft/config/WebConfig.java index 98e22e95..4696cfdb 100644 --- a/src/main/java/net/mingsoft/config/WebConfig.java +++ b/src/main/java/net/mingsoft/config/WebConfig.java @@ -3,6 +3,7 @@ package net.mingsoft.config; import java.io.File; import org.springframework.aop.Advisor; +import net.mingsoft.basic.filter.XSSEscapeFilter; import org.springframework.aop.support.DefaultPointcutAdvisor; import org.springframework.aop.support.JdkRegexpMethodPointcut; import org.springframework.boot.web.servlet.FilterRegistrationBean; @@ -131,18 +132,17 @@ public class WebConfig implements WebMvcConfigurer { return new DefaultPointcutAdvisor(druidStatPointcut(), druidStatInterceptor()); } - // /** - // * xssFilter注册 - // */ - // @Bean - // public FilterRegistrationBean xssFilterRegistration() { - // XssFilter xssFilter = new XssFilter(); - // xssFilter.setUrlExclusion(Arrays.asList("/static/")); - // FilterRegistrationBean registration = new - // FilterRegistrationBean(xssFilter); - // registration.addUrlPatterns("/*"); - // return registration; - // } + /** + * xssFilter注册 + */ + @Bean + public FilterRegistrationBean xssFilterRegistration() { + XSSEscapeFilter xssFilter = new XSSEscapeFilter(); + FilterRegistrationBean registration = new + FilterRegistrationBean(xssFilter); + registration.addUrlPatterns("/*"); + return registration; + } /** * RequestContextListener注册