修复漏洞(对报错信息进行自定义,避免泄露系统敏感信息)
This commit is contained in:
@@ -131,6 +131,8 @@ public class SecurityConfig
|
||||
.antMatchers("/app/fair/**").permitAll()
|
||||
//.antMatchers("/app/**").permitAll()
|
||||
//.antMatchers("/swagger-ui.html", "/swagger-resources/**", "/webjars/**", "/*/api-docs", "/druid/**").permitAll()
|
||||
//正式环境禁用接口
|
||||
.antMatchers("/swagger-ui.html", "/swagger-resources/**", "/webjars/**", "/*/api-docs", "/druid/**","/app/user/list").denyAll()
|
||||
//放行前端界面
|
||||
.antMatchers("/kashi/job-portal/detail/**").permitAll()
|
||||
// 除上面外的所有请求全部需要鉴权认证
|
||||
|
||||
Reference in New Issue
Block a user