Ver Fonte

漏洞修复,禁用字典标查询,禁用httptrace

fenghaifu há 1 dia atrás
pai
commit
2528b897ad

+ 3 - 3
jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/config/ShiroConfig.java

@@ -134,9 +134,9 @@ public class ShiroConfig {
 		filterChainDefinitionMap.put("/actTask/todo-list/**","anon");
 
 		//性能监控
-		filterChainDefinitionMap.put("/actuator/metrics/**", "anon");
-		filterChainDefinitionMap.put("/actuator/httptrace/**", "anon");
-		filterChainDefinitionMap.put("/actuator/redis/**", "anon");
+//		filterChainDefinitionMap.put("/actuator/metrics/**", "anon");
+//		filterChainDefinitionMap.put("/actuator/httptrace/**", "anon");
+//		filterChainDefinitionMap.put("/actuator/redis/**", "anon");
 
 		//测试示例
 		filterChainDefinitionMap.put("/test/jeecgDemo/html", "anon"); //模板页面

+ 4 - 4
jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/modules/ngalain/controller/NgAlainController.java

@@ -79,8 +79,8 @@ public class NgAlainController {
         }
         return dictlist;
     }
-    @RequestMapping(value = "/getDictItemsByTable/{table}/{key}/{value}", method = RequestMethod.GET)
-    public Object getDictItemsByTable(@PathVariable String table,@PathVariable String key,@PathVariable String value) {
-        return this.ngAlainService.getDictByTable(table,key,value);
-    }
+//    @RequestMapping(value = "/getDictItemsByTable/{table}/{key}/{value}", method = RequestMethod.GET)
+//    public Object getDictItemsByTable(@PathVariable String table,@PathVariable String key,@PathVariable String value) {
+//        return this.ngAlainService.getDictByTable(table,key,value);
+//    }
 }