框架漏洞

ruoyi-admin/src/main/java/com/ruoyi/web/controller/tool/SwaggerController.java

@@ -8,17 +8,17 @@ import com.ruoyi.common.core.controller.BaseController;
 
 /**
  * swagger 接口
- * 
+ *
  * @author ruoyi
  */
 @Controller
 @RequestMapping("/tool/swagger")
 public class SwaggerController extends BaseController
 {
-    @PreAuthorize("@ss.hasPermi('tool:swagger:view')")
+//    @PreAuthorize("@ss.hasPermi('tool:swagger:view')")
-    @GetMapping()
+//    @GetMapping()
-    public String index()
+//    public String index()
-    {
+//    {
-        return redirect("/swagger-ui.html");
+//        return redirect("/swagger-ui.html");
-    }
+//    }
 }

ruoyi-framework/src/main/java/com/ruoyi/framework/config/ResourcesConfig.java

@@ -15,7 +15,7 @@ import com.ruoyi.framework.interceptor.RepeatSubmitInterceptor;
 
 /**
  * 通用配置
- * 
+ *
  * @author ruoyi
  */
 @Configuration
@@ -32,8 +32,8 @@ public class ResourcesConfig implements WebMvcConfigurer
                 .addResourceLocations("file:" + RuoYiConfig.getProfile() + "/");
 
         /** swagger配置 */
-        registry.addResourceHandler("/swagger-ui/**")
+//        registry.addResourceHandler("/swagger-ui/**")
-                .addResourceLocations("classpath:/META-INF/resources/webjars/springfox-swagger-ui/");
+//                .addResourceLocations("classpath:/META-INF/resources/webjars/springfox-swagger-ui/");
     }
 
     /**
@@ -67,4 +67,4 @@ public class ResourcesConfig implements WebMvcConfigurer
         // 返回新的CorsFilter
         return new CorsFilter(source);
     }
-}
+}