【add】添加跨站白名单配置

jero-boot/jero-boot-base/jero-boot-base-core/src/main/java/com/jero/config/CsrfFilter.java

@@ -36,7 +36,8 @@ public class CsrfFilter implements Filter {
     /**
      * 白名单
      */
-    private List<String> whiteUrls = new ArrayList<>();
+    @Value("${jero.whiteUrls}")
+    private List<String> whiteUrls;
 
     /**
      * size
@@ -45,45 +46,7 @@ public class CsrfFilter implements Filter {
 
     @Override
     public void init(FilterConfig filterConfig) throws ServletException {
-        FileInputStream fis = null;
-        InputStreamReader isr = null;
-        BufferedReader br = null;
-        try {
-             File file = ResourceUtils.getFile("classpath:whiteUrls.txt");
-             fis = new FileInputStream(file);
-             isr = new InputStreamReader(fis);
-             br = new BufferedReader(isr);
-            String url = null;
-            while((url = br.readLine()) != null){
-                whiteUrls.add(url);
-            }
             size = whiteUrls.size();
-        } catch (IOException e) {
-            e.printStackTrace();
-        } finally {
-            if(fis!=null){
-                try {
-                    fis.close();
-                } catch (IOException e) {
-                    e.printStackTrace();
-                }
-            }
-            if(isr!=null){
-                try {
-                    isr.close();
-                } catch (IOException e) {
-                    e.printStackTrace();
-                }
-            }
-            if(br!=null){
-                try {
-                    br.close();
-                } catch (IOException e) {
-                    e.printStackTrace();
-                }
-            }
-        }
-
     }
 
     @Override

jero-boot/jero-boot-single-startup/src/main/resources/application-dev.yml

@@ -131,7 +131,7 @@ spring:
         connectionProperties: druid.stat.mergeSql\=true;druid.stat.slowSqlMillis\=5000
       datasource:
         master:
-          url: jdbc:mysql://10.0.3.44:3306/jero-boot?characterEncoding=UTF-8&useUnicode=true&useSSL=false&tinyInt1isBit=false&allowPublicKeyRetrieval=true&serverTimezone=Asia/Shanghai
+          url: jdbc:mysql://localhost:3306/jero-boot?characterEncoding=UTF-8&useUnicode=true&useSSL=false&tinyInt1isBit=false&allowPublicKeyRetrieval=true&serverTimezone=Asia/Shanghai
           username: root
           password: 123456
           driver-class-name: com.mysql.cj.jdbc.Driver
@@ -246,6 +246,8 @@ jero :
     enabled: true
   # 文件限制后缀黑名单
   fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin
+  # 跨站白名单
+  whiteUrls:
 #cas单点登录
 cas:
   prefixUrl: http://cas.example.org:8443/cas

jero-boot/jero-boot-single-startup/src/main/resources/application-prod.yml

@@ -246,6 +246,8 @@ jero :
     enabled: true
   # 文件限制后缀黑名单
   fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin
+  # 跨站白名单
+  whiteUrls:
 #cas单点登录
 cas:
   prefixUrl: http://cas.example.org:8443/cas

jero-boot/jero-boot-single-startup/src/main/resources/application-test.yml

@@ -246,7 +246,8 @@ jero :
     enabled: true
   # 文件限制后缀黑名单
   fileSuffixLimits : 0x00,%00,\\00,.jsp,.exe,.php,.asp,.aspx,.jspx,.xml,.html,.js,.sh,.bin
-
+  # 跨站白名单
+  whiteUrls:
 #Mybatis输出sql日志
 logging:
   level:

jero-boot/jero-boot-single-startup/src/main/resources/jero/jero_database.properties

@@ -2,7 +2,7 @@
 driver_name=com.mysql.cj.jdbc.Driver
 url=jdbc:mysql://localhost:3306/jero-boot?useUnicode=true&characterEncoding=UTF-8&serverTimezone=Asia/Shanghai
 username=root
-password=root
+password=123456
 database_name=jero-boot
 
 #oracle