sxc/Vetti-Service-new
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

白名单添加

Browse Source
This commit is contained in:
wangxiangshun
2025-10-26 13:16:27 +08:00
parent 1f2a56dd37
commit a16e4ca761
2 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
vetti-admin/target/classes/application.yml
View File

@@ -70,6 +70,10 @@ swagger:
pathMapping: /prod-api pathMapping: /prod-api
#################################### Swagger end ################################### #################################### Swagger end ###################################
server:
error:
include-stacktrace: never # 永不输出 trace 信息
# 防止XSS攻击 # 防止XSS攻击
xss: xss:
# 过滤开关 # 过滤开关

4
vetti-framework/src/main/java/com/vetti/framework/config/SecurityConfig.java
View File

@@ -111,7 +111,9 @@ public class SecurityConfig
.authorizeHttpRequests((requests) -> { .authorizeHttpRequests((requests) -> {
permitAllUrl.getUrls().forEach(url -> requests.antMatchers(url).permitAll()); permitAllUrl.getUrls().forEach(url -> requests.antMatchers(url).permitAll());
// 对于登录login 注册register 验证码captchaImage 允许匿名访问 // 对于登录login 注册register 验证码captchaImage 允许匿名访问
requests.antMatchers("/login", "/register", "/captchaImage","/aiCommon/**","/voice-websocket/**").permitAll() requests.antMatchers("/login", "/register", "/captchaImage","/aiCommon/**",
"/voice-websocket/**","/verification/email/send","/verification/email/verify","/verification/phone/send",
"/forgotPassword").permitAll()
// 静态资源，可匿名访问 // 静态资源，可匿名访问
.antMatchers(HttpMethod.GET, "/", "/*.html", "/**/*.html", "/**/*.css", "/**/*.js", "/profile/**").permitAll() .antMatchers(HttpMethod.GET, "/", "/*.html", "/**/*.html", "/**/*.css", "/**/*.js", "/profile/**").permitAll()
.antMatchers("/swagger-ui.html", "/swagger-resources/**", "/webjars/**", "/*/api-docs", "/druid/**").permitAll() .antMatchers("/swagger-ui.html", "/swagger-resources/**", "/webjars/**", "/*/api-docs", "/druid/**").permitAll()