修复漏洞(对报错信息进行自定义,避免泄露系统敏感信息)

This commit is contained in:
sh
2026-04-29 12:03:40 +08:00
parent 93a020bb63
commit 6b7d16c400
3 changed files with 8 additions and 0 deletions

View File

@@ -131,6 +131,8 @@ public class SecurityConfig
.antMatchers("/app/fair/**").permitAll()
//.antMatchers("/app/**").permitAll()
//.antMatchers("/swagger-ui.html", "/swagger-resources/**", "/webjars/**", "/*/api-docs", "/druid/**").permitAll()
//正式环境禁用接口
.antMatchers("/swagger-ui.html", "/swagger-resources/**", "/webjars/**", "/*/api-docs", "/druid/**","/app/user/list").denyAll()
//放行前端界面
.antMatchers("/kashi/job-portal/detail/**").permitAll()
// 除上面外的所有请求全部需要鉴权认证