|
|
@@ -3,6 +3,7 @@ package net.mingsoft.config;
|
|
|
import java.io.File;
|
|
|
|
|
|
import org.springframework.aop.Advisor;
|
|
|
+import net.mingsoft.basic.filter.XSSEscapeFilter;
|
|
|
import org.springframework.aop.support.DefaultPointcutAdvisor;
|
|
|
import org.springframework.aop.support.JdkRegexpMethodPointcut;
|
|
|
import org.springframework.boot.web.servlet.FilterRegistrationBean;
|
|
|
@@ -131,18 +132,16 @@ public class WebConfig implements WebMvcConfigurer {
|
|
|
return new DefaultPointcutAdvisor(druidStatPointcut(), druidStatInterceptor());
|
|
|
}
|
|
|
|
|
|
- // /**
|
|
|
- // * xssFilter注册
|
|
|
- // */
|
|
|
- // @Bean
|
|
|
- // public FilterRegistrationBean xssFilterRegistration() {
|
|
|
- // XssFilter xssFilter = new XssFilter();
|
|
|
- // xssFilter.setUrlExclusion(Arrays.asList("/static/"));
|
|
|
- // FilterRegistrationBean registration = new
|
|
|
- // FilterRegistrationBean(xssFilter);
|
|
|
- // registration.addUrlPatterns("/*");
|
|
|
- // return registration;
|
|
|
- // }
|
|
|
+ /**
|
|
|
+ * xssFilter注册
|
|
|
+ */
|
|
|
+ @Bean
|
|
|
+ public FilterRegistrationBean xssFilterRegistration() {
|
|
|
+ XSSEscapeFilter xssFilter = new XSSEscapeFilter();
|
|
|
+ FilterRegistrationBean registration = new FilterRegistrationBean(xssFilter);
|
|
|
+ registration.addUrlPatterns("/*");
|
|
|
+ return registration;
|
|
|
+ }
|
|
|
|
|
|
/**
|
|
|
* RequestContextListener注册
|
wangtp