201206030/novel-plus
1
0
Fork 0
mirror of https://github.com/201206030/novel-plus.git synced 2025-07-15 13:46:39 +00:00
Code Issues Packages Releases Wiki Activity

fix(novel-front): 修复评论回复中的XSS漏洞

Browse Source
This commit is contained in:
xiongxiaoyang
2025-07-14 21:02:13 +08:00
parent 64e1686fd1
commit 522bb7c739
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
novel-front/src/main/resources/application.yml
View File

@ -23,7 +23,7 @@ xss:
# 排除链接（多个用逗号分隔） # 排除链接（多个用逗号分隔）
excludes: /system/notice/* excludes: /system/notice/*
# 匹配链接 （多个用逗号分隔） # 匹配链接 （多个用逗号分隔）
urlPatterns: /book/addBookComment,/user/addFeedBack,/author/addBook,/author/addBookContent,/author/updateBookContent,/author/register.html urlPatterns: /book/addCommentReply,/book/addBookComment,/user/addFeedBack,/author/addBook,/author/addBookContent,/author/updateBookContent,/author/register.html
author: author: