修改跨站脚本攻击缺陷

This commit is contained in:
范强强
2024-03-19 17:43:13 +08:00
parent f1ab8f1db2
commit 704692fb3e
791 changed files with 52 additions and 272365 deletions
@@ -170,12 +170,12 @@ jero:
# 文件限制后缀黑名单
fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin,$DATA
# 跨站白名单
whiteUrls: localhost:62345,localhost:8184,localhost:3334,localhost:3435,localhost:3408,127.0.0.1:8080,127.0.0.1:8081
whiteUrls: localhost:62345,localhost:8184,localhost:3334,localhost:3435,localhost:3408,127.0.0.1:8080,127.0.0.1:8081,10.0.3.3:8184
xssExcludedPages: /login,/updatePassword
# cors白名单
notFilter:
# origin地址
originIp: http://localhost:62345,http://localhost:8184,http://localhost:3334,http://localhost:3435,http://localhost:3408,http://127.0.0.1:8080,http://127.0.0.1:8081
originIp: http://localhost:62345,http://localhost:8184,http://localhost:3334,http://localhost:3435,http://localhost:3408,http://127.0.0.1:8080,http://127.0.0.1:8081,http://10.0.3.3:8184
# 加密默认值
password:
pbe: