【fix】处理csrf的bug

jero-boot/jero-boot-base/jero-boot-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java

@@ -78,7 +78,7 @@ public class CsrfFilter implements Filter {
     private boolean isWhiteReq(String referUrl) {
         try {
             if (referUrl == null || "".equals(referUrl) || size == 0) {
-                return false;
+                return true;
             } else {
                 String refHost = "";
                 referUrl = referUrl.toLowerCase();

jero-boot/jero-boot-single-startup/src/main/java/com/jero/JeroSystemSingleApplication.java

@@ -36,7 +36,7 @@ public class JeroSystemSingleApplication extends SpringBootServletInitializer {
                 "Application jero-boot is running! Access URLs:\n\t" +
                 "Local: \t\thttp://localhost:" + port + path + "\n\t" +
                 "External: \thttp://" + ip + ":" + port + path + "\n\t" +
-                "Swagger文档: \thttp://" + ip + ":" + port + path + "doc.html\n" +
+                "Swagger文档: \thttp://" + ip + ":" + port + path + "/doc.html\n" +
                 "----------------------------------------------------------");
     }
 

jero-boot/jero-boot-single-startup/src/main/resources/application-dev.yml

@@ -272,13 +272,13 @@ jero:
   # 文件限制后缀黑名单
   fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin
   # 跨站白名单
-  whiteUrls: localhost:3000
+  whiteUrls: localhost:3000,localhost:8080
   # xss白名单
   xssExcludedPages: /login,/updatePassword
   # cors白名单
   notFilter:
   # origin地址
-  originIp: http://localhost:3000
+  originIp: http://localhost:3000,
   # 加密默认值
   password:
     pbe:

jero-boot/jero-boot-single-startup/src/main/resources/application-prod.yml

@@ -273,7 +273,7 @@ jero:
   # 文件限制后缀黑名单
   fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin
   # 跨站白名单
-  whiteUrls:
+  whiteUrls: localhost:3000,localhost:8080
   # xss白名单
   xssExcludedPages: /login,/updatePassword
   # cors白名单

jero-boot/jero-boot-single-startup/src/main/resources/application-test.yml

@@ -272,7 +272,7 @@ jero:
   # 文件限制后缀黑名单
   fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin
   # 跨站白名单
-  whiteUrls: localhost:3000
+  whiteUrls: localhost:3000,localhost:8080
   # xss白名单
   xssExcludedPages: /login,/updatePassword
   # cors白名单