Pārlūkot izejas kodu

支持配置XSS跨站脚本过滤

RuoYi 4 gadi atpakaļ
vecāks
revīzija
00fa1c3158

+ 2 - 0
ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java

@@ -2,6 +2,7 @@ package com.ruoyi.gateway.filter;
2 2
 
3 3
 import java.nio.charset.StandardCharsets;
4 4
 import org.springframework.beans.factory.annotation.Autowired;
5
+import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
5 6
 import org.springframework.cloud.gateway.filter.GatewayFilterChain;
6 7
 import org.springframework.cloud.gateway.filter.GlobalFilter;
7 8
 import org.springframework.core.Ordered;
@@ -27,6 +28,7 @@ import reactor.core.publisher.Mono;
27 28
  * @author ruoyi
28 29
  */
29 30
 @Component
31
+@ConditionalOnProperty(value = "security.xss.enabled", havingValue = "true")
30 32
 public class XssFilter implements GlobalFilter, Ordered
31 33
 {
32 34
     // 跨站脚本的 xss 配置,nacos自行添加