xss

2019-10-10 10:42:13 +08:00 · 2019-10-10 10:42:13 +08:00 · 7161b213a5
parent aa2d8ac17c
commit 7161b213a5
1 changed files with 2 additions and 1 deletions
--- a/src/main/java/net/mingsoft/config/WebConfig.java
+++ b/src/main/java/net/mingsoft/config/WebConfig.java
@ -150,7 +150,8 @@ public class WebConfig implements WebMvcConfigurer {
        FilterRegistrationBean registration = new FilterRegistrationBean(xssFilter);
        xssFilter.excludes.add(".*file/upload.do");
        xssFilter.excludes.add(".*/jsp/editor.do");
-        registration.addUrlPatterns("/**");
+        xssFilter.excludes.add("/");
+        registration.addUrlPatterns("/*");
        return registration;
    }