fix:20260904代码扫描漏洞问题修复

This commit is contained in:
2026-09-11 14:04:30 +08:00
parent 01921f7fcf
commit 61b8819057
7 changed files with 205 additions and 78 deletions
+9 -13
View File
@@ -16,24 +16,20 @@ sm4cbc:
keyHex: 00112233445566778899aabbccddeeff
ivHex: 0102030405060708090a0b0c0d0e0f10
jetty:
contextPath: /
# HTTP 与 HTTPS 均隐藏容器版本;安全漏洞仍需通过维护补丁修复。
httpConfig:
sendServerVersion: false
httpsConfig:
sendServerVersion: false
tomcat:
contextPath: ""
# 容器错误响应不披露版本;Session Cookie 保持 HttpOnly。
session:
cookie:
httponly: true
threadpool:
idleTimeout: 60000
minThreads: 10
executor:
maxIdleTime: 60000
minSpareThreads: 10
maxThreads: 500
page:
403: /error/403.html
404: /error/404.html
500: /error/500.html
403: /__container_error
404: /__container_error
500: /__container_error
#结合ftp使用,或用nginx代理ftp路径
#staticPath: /Users/wizzer/temp/files
#开发模式静态资源