优化XSS跨站脚本过滤

RuoYi

2021-07-28 fd0de5c3ce1b0faa0f2e274d7b70f516e69d575a

 src/main/java/com/ruoyi/framework/config/FilterConfig.java

@@ -4,6 +4,7 @@
import java.util.Map;

import javax.servlet.DispatcherType;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;

import org.springframework.boot.web.servlet.FilterRegistrationBean;

import org.springframework.context.annotation.Bean;

import org.springframework.context.annotation.Configuration;

@@ -17,11 +18,9 @@
 * @author ruoyi

 */

@Configuration

@ConditionalOnProperty(value = "xss.enabled", havingValue = "true")

public class FilterConfig

{

    @Value("${xss.enabled}")

    private String enabled;



    @Value("${xss.excludes}")

    private String excludes;



@@ -40,7 +39,6 @@
        registration.setOrder(FilterRegistrationBean.HIGHEST_PRECEDENCE);

        Map<String, String> initParameters = new HashMap<String, String>();

        initParameters.put("excludes", excludes);

        initParameters.put("enabled", enabled);

        registration.setInitParameters(initParameters);

        return registration;

    }