浏览代码

fix: 关闭前端上传、修改xssp配置

msgroup 3 年之前
父节点
当前提交
02bb48ae98
共有 2 个文件被更改,包括 4 次插入4 次删除
  1. 3 3
      pom.xml
  2. 1 1
      src/main/resources/application.yml

+ 3 - 3
pom.xml

@@ -44,17 +44,17 @@
         <dependency>
             <groupId>net.mingsoft</groupId>
             <artifactId>ms-base</artifactId>
-            <version>2.1.14</version>
+            <version>2.1.14.1</version>
         </dependency>
         <dependency>
             <groupId>net.mingsoft</groupId>
             <artifactId>ms-basic</artifactId>
-            <version>2.1.14</version>
+            <version>2.1.14.1</version>
         </dependency>
         <dependency>
             <groupId>net.mingsoft</groupId>
             <artifactId>ms-mdiy</artifactId>
-            <version>2.1.14</version>
+            <version>2.1.14.1</version>
         </dependency>
 
         <!--store入口依赖(源码不开发),如果不需要MStore可以直接去掉依赖-->

+ 1 - 1
src/main/resources/application.yml

@@ -23,7 +23,7 @@ ms:
   xss:
     xssEnable: true #xss过滤器的开关
     filterUrl: /**   #过滤的url,多个用逗号分开
-    excludeUrl: /ms/**,/static/**,/template/**,/file/upload.do,/static/plugins/ueditor/1.4.3.3/jsp/editor.do  #排除的url,多个用逗号分开
+    excludeUrl: /static/**,/template/**,/file/upload.do,/static/plugins/ueditor/1.4.3.3/jsp/editor.do  #排除的url,多个用逗号分开
   #  mstore-url: http://store.i.mingsoft.net
   #  mstore-host: store.i.mingsoft.net
   # shiro-key:  #16位长度,不填写默认随机生成