Commit b89d90ed99adae59bec7bd417ae2cfa0f122311d
Committed by
Gitee
Gitee
1 parent
c80a2fe3
update jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/config/ShiroConfig.java.
修复-因shiro配置导致actuator漏洞利用造成token暴露
Showing
1 changed file
with
0 additions
and
5 deletions
jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/config/ShiroConfig.java
| ... | ... | @@ -108,11 +108,6 @@ public class ShiroConfig { |
| 108 | 108 | filterChainDefinitionMap.put("/webjars/**", "anon"); |
| 109 | 109 | filterChainDefinitionMap.put("/v2/**", "anon"); |
| 110 | 110 | |
| 111 | - //性能监控 | |
| 112 | - filterChainDefinitionMap.put("/actuator/metrics/**", "anon"); | |
| 113 | - filterChainDefinitionMap.put("/actuator/httptrace/**", "anon"); | |
| 114 | - filterChainDefinitionMap.put("/actuator/redis/**", "anon"); | |
| 115 | - | |
| 116 | 111 | //测试示例 |
| 117 | 112 | filterChainDefinitionMap.put("/test/jeecgDemo/html", "anon"); //模板页面 |
| 118 | 113 | filterChainDefinitionMap.put("/test/jeecgDemo/redis/**", "anon"); //redis测试 |
| ... | ... |