From b89d90ed99adae59bec7bd417ae2cfa0f122311d Mon Sep 17 00:00:00 2001 From: weirdor <179946422@qq.com> Date: Tue, 8 Sep 2020 15:04:54 +0800 Subject: [PATCH] update jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/config/ShiroConfig.java. 修复-因shiro配置导致actuator漏洞利用造成token暴露 --- jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/config/ShiroConfig.java | 5 ----- 1 file changed, 0 insertions(+), 5 deletions(-) diff --git a/jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/config/ShiroConfig.java b/jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/config/ShiroConfig.java index 6c8b903..19224a3 100644 --- a/jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/config/ShiroConfig.java +++ b/jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/config/ShiroConfig.java @@ -108,11 +108,6 @@ public class ShiroConfig { filterChainDefinitionMap.put("/webjars/**", "anon"); filterChainDefinitionMap.put("/v2/**", "anon"); - //性能监控 - filterChainDefinitionMap.put("/actuator/metrics/**", "anon"); - filterChainDefinitionMap.put("/actuator/httptrace/**", "anon"); - filterChainDefinitionMap.put("/actuator/redis/**", "anon"); - //测试示例 filterChainDefinitionMap.put("/test/jeecgDemo/html", "anon"); //模板页面 filterChainDefinitionMap.put("/test/jeecgDemo/redis/**", "anon"); //redis测试 -- libgit2 0.22.2