diff --git a/jero-boot-base/jero-boot-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java b/jero-boot-base/jero-boot-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java
index b32eaa49..f3d27b5a 100644
--- a/jero-boot-base/jero-boot-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java
+++ b/jero-boot-base/jero-boot-base-core/src/main/java/com/jero/config/filter/csrf/CsrfFilter.java
@@ -55,7 +55,7 @@ public class CsrfFilter implements Filter {
             // 获取来源
             String referurl = req.getHeader("Referer");
             // websocket 请求放过
-            if(isWhiteReq(referurl) || url.contains("/websocket/")){
+            if(isWhiteReq(referurl) || url.contains("/websocket/") || url.contains("download")){
                 chain.doFilter(request, response);
             } else {
                 String log = "";