!184 xxs

Merge pull request !184 from 灰色DT/4.7.2

src/main/java/net/mingsoft/config/WebConfig.java

@@ -150,16 +150,16 @@ public class WebConfig implements WebMvcConfigurer {
 		return new DefaultPointcutAdvisor(druidStatPointcut(), druidStatInterceptor());
 	}
 
-//	 /**
+    @Bean
-//	 * xssFilter注册
+    public FilterRegistrationBean xssFilterRegistration() {
-//	 */
+        XSSEscapeFilter xssFilter = new XSSEscapeFilter();
-//	 @Bean
+        FilterRegistrationBean registration = new FilterRegistrationBean(xssFilter);
-//	 public FilterRegistrationBean xssFilterRegistration() {
+        xssFilter.excludes.add(".*file/upload.do");
-//	 XSSEscapeFilter xssFilter = new XSSEscapeFilter();
+        xssFilter.excludes.add(".*/jsp/editor.do");
-//	 FilterRegistrationBean registration = new FilterRegistrationBean(xssFilter);
+        registration.addUrlPatterns("/*");
-//	 registration.addUrlPatterns("/*");
+
-//	 return registration;
+        return registration;
-//	 }
+    }
 
 	/**
 	 * RequestContextListener注册

src/main/resources/application.yml

@@ -13,6 +13,7 @@ ms:
   
  upload: 
    path: /upload
+   mapping: /upload/**
    denied: .exe,.jsp
    allowed: jpg
    max-size: 1