监督端-过滤富文本xss

zdxt-web-server/zdxt-admin-web-server/src/main/resources/application-dev.yml

@@ -342,3 +342,12 @@ srnwg:
 #  integrationKey: ENC(8RZtrfL4t5tsEk7lfrw00+4hSxbjxcVM)
 #  paasId: szsfj_zhifajianduma_001
 #  paasToken: ENC(0Cg8Vtpay+3hwRm+vJB0utikr4dXcEguwSaxlbTWkgQ4parB8pN2rL2xrhQ8eUd5)
+
+--- # XSS过滤配置
+xss:
+  # 开启XSS过滤
+  enabled: true
+  # 排除链接(不进行XSS过滤的URL,这些接口需要接收富文本HTML内容)
+  excludeUrls:
+    - /web/enforcementcode/educationServices/add
+    - /web/enforcementcode/educationServices/edit

zdxt-web-server/zdxt-admin-web-server/src/main/resources/application-prod.yml

@@ -274,3 +274,12 @@ justauth:
       client-id: 10**********6
       client-secret: 1f7d08**********5b7**********29e
       redirect-uri: ${justauth.address}/social-callback?source=gitea
+
+--- # XSS过滤配置
+xss:
+  # 开启XSS过滤
+  enabled: true
+  # 排除链接(不进行XSS过滤的URL,这些接口需要接收富文本HTML内容)
+  excludeUrls:
+    - /web/enforcementcode/educationServices/add
+    - /web/enforcementcode/educationServices/edit

zdxt-web-server/zdxt-admin-web-server/src/main/resources/application.yml

@@ -281,9 +281,11 @@ springdoc:
 xss:
   # 过滤开关
   enabled: true
-  # 排除链接
+  # 排除链接(不进行XSS过滤的URL,这些接口需要接收富文本HTML内容)
   excludeUrls:
     - /system/notice
+    - /web/enforcementcode/educationServices/add
+    - /web/enforcementcode/educationServices/edit
 
 --- # 分布式锁 lock4j 全局配置
 lock4j: