新增CSRF防护功能

2025-10-19 12:07:41 +00:00 · 2025-04-15 16:24:42 +08:00
parent 407f9f46d8
commit ea9976575a
11 changed files with 175 additions and 9 deletions
--- a/ruoyi-admin/src/main/resources/application.yml
+++ b/ruoyi-admin/src/main/resources/application.yml
@@ -136,6 +136,13 @@ xss:
  # 匹配链接
  urlPatterns: /system/*,/monitor/*,/tool/*

+# 防止csrf攻击
+csrf:
+  # 过滤开关
+  enabled: true
+  # 白名单（多个用逗号分隔）
+  whites: 
+
 # Swagger配置
 swagger:
  # 是否开启swagger