diff --git a/zdxt-web-server/zdxt-admin-web-server/src/main/resources/application-dev.yml b/zdxt-web-server/zdxt-admin-web-server/src/main/resources/application-dev.yml index 1c6cfc7e..06e58e91 100644 --- a/zdxt-web-server/zdxt-admin-web-server/src/main/resources/application-dev.yml +++ b/zdxt-web-server/zdxt-admin-web-server/src/main/resources/application-dev.yml @@ -342,3 +342,12 @@ srnwg: # integrationKey: ENC(8RZtrfL4t5tsEk7lfrw00+4hSxbjxcVM) # paasId: szsfj_zhifajianduma_001 # paasToken: ENC(0Cg8Vtpay+3hwRm+vJB0utikr4dXcEguwSaxlbTWkgQ4parB8pN2rL2xrhQ8eUd5) + +--- # XSS过滤配置 +xss: + # 开启XSS过滤 + enabled: true + # 排除链接(不进行XSS过滤的URL,这些接口需要接收富文本HTML内容) + excludeUrls: + - /web/enforcementcode/educationServices/add + - /web/enforcementcode/educationServices/edit diff --git a/zdxt-web-server/zdxt-admin-web-server/src/main/resources/application-prod.yml b/zdxt-web-server/zdxt-admin-web-server/src/main/resources/application-prod.yml index 59c1404f..082a2935 100644 --- a/zdxt-web-server/zdxt-admin-web-server/src/main/resources/application-prod.yml +++ b/zdxt-web-server/zdxt-admin-web-server/src/main/resources/application-prod.yml @@ -274,3 +274,12 @@ justauth: client-id: 10**********6 client-secret: 1f7d08**********5b7**********29e redirect-uri: ${justauth.address}/social-callback?source=gitea + +--- # XSS过滤配置 +xss: + # 开启XSS过滤 + enabled: true + # 排除链接(不进行XSS过滤的URL,这些接口需要接收富文本HTML内容) + excludeUrls: + - /web/enforcementcode/educationServices/add + - /web/enforcementcode/educationServices/edit diff --git a/zdxt-web-server/zdxt-admin-web-server/src/main/resources/application.yml b/zdxt-web-server/zdxt-admin-web-server/src/main/resources/application.yml index 13d41076..3d1c99fe 100644 --- a/zdxt-web-server/zdxt-admin-web-server/src/main/resources/application.yml +++ b/zdxt-web-server/zdxt-admin-web-server/src/main/resources/application.yml @@ -281,9 +281,11 @@ springdoc: xss: # 过滤开关 enabled: true - # 排除链接 + # 排除链接(不进行XSS过滤的URL,这些接口需要接收富文本HTML内容) excludeUrls: - /system/notice + - /web/enforcementcode/educationServices/add + - /web/enforcementcode/educationServices/edit --- # 分布式锁 lock4j 全局配置 lock4j: