LiuWenli comments

Repositories
Issues
Comments

Results 2 comments of


                                            LiuWenli

发现一个重大漏洞

if (uri.startsWith("/admin") && null == request.getSession().getAttribute("loginUserId")) 去掉这个 uri.startsWith("/admin")即可

在配置类中配置了拦截路径，//admin/xxx也不会放行 // 添加一个拦截器，拦截以/admin为前缀的url路径后台管理登录拦截 registry.addInterceptor(adminLoginInterceptor) .addPathPatterns("/admin/**") .excludePathPatterns("/admin/v1/login") .excludePathPatterns("/admin/v1/reload") .excludePathPatterns("/admin/dist/**") .excludePathPatterns("/admin/plugins/**") .excludePathPatterns("/X-admin/**");