update jeecg-boot/jeecg-boot-module-system/src/main/java/org/jeecg/config/ShiroConfig.java.

修复-因shiro配置导致actuator漏洞利用造成token暴露
2020-09-08 15:04:54 +08:00
parent c80a2fe3ef
commit b89d90ed99
1 changed files with 0 additions and 5 deletions
@@ -108,11 +108,6 @@ public class ShiroConfig {
 		filterChainDefinitionMap.put("/webjars/**", "anon");
 		filterChainDefinitionMap.put("/v2/**", "anon");

-		//性能监控
-		filterChainDefinitionMap.put("/actuator/metrics/**", "anon");
-		filterChainDefinitionMap.put("/actuator/httptrace/**", "anon");
-		filterChainDefinitionMap.put("/actuator/redis/**", "anon");
-
 		//测试示例
 		filterChainDefinitionMap.put("/test/jeecgDemo/html", "anon"); //模板页面
 		filterChainDefinitionMap.put("/test/jeecgDemo/redis/**", "anon"); //redis测试