mirror of
https://bitbucket.org/wisemapping/wisemapping-open-source.git
synced 2024-11-21 21:57:56 +01:00
parent
297931508a
commit
ffd976ffe5
@ -3,14 +3,10 @@
|
||||
<beans xmlns="http://www.springframework.org/schema/beans"
|
||||
xmlns:sec="http://www.springframework.org/schema/security"
|
||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xmlns:util="http://www.springframework.org/schema/util"
|
||||
xsi:schemaLocation="http://www.springframework.org/schema/beans
|
||||
http://www.springframework.org/schema/beans/spring-beans.xsd
|
||||
http://www.springframework.org/schema/security
|
||||
http://www.springframework.org/schema/security/spring-security.xsd
|
||||
http://www.springframework.org/schema/util
|
||||
http://www.springframework.org/schema/util/spring-util.xsd"
|
||||
>
|
||||
http://www.springframework.org/schema/security/spring-security.xsd">
|
||||
|
||||
<bean id="custom-firewall" class="org.springframework.security.web.firewall.StrictHttpFirewall">
|
||||
<property name="allowSemicolon" value="true"/>
|
||||
@ -47,8 +43,6 @@
|
||||
</sec:http>
|
||||
|
||||
<sec:http use-expressions="true" pattern="/c/**/*">
|
||||
<sec:cors configuration-source-ref="corsSource"/>
|
||||
|
||||
<sec:csrf request-matcher-ref="requestMatcher"/>
|
||||
<sec:intercept-url pattern="/c/login" access="permitAll"/>
|
||||
<sec:intercept-url pattern="/c/registration" access="hasRole('ANONYMOUS')"/>
|
||||
@ -89,16 +83,4 @@
|
||||
<property name="alwaysUseDefaultTargetUrl" value="false"/>
|
||||
</bean>
|
||||
|
||||
<bean id="corsSource" class="org.springframework.web.cors.UrlBasedCorsConfigurationSource">
|
||||
<property name="corsConfigurations">
|
||||
<util:map>
|
||||
<entry key="/c/**">
|
||||
<bean class="org.springframework.web.cors.CorsConfiguration">
|
||||
<property name="allowedOrigins"
|
||||
value="https://app.wisemapping.com, https://static-app.wisemapping.com/"/>
|
||||
</bean>
|
||||
</entry>
|
||||
</util:map>
|
||||
</property>
|
||||
</bean>
|
||||
</beans>
|
@ -23,7 +23,7 @@
|
||||
</mvc:interceptors>
|
||||
|
||||
<mvc:cors>
|
||||
<mvc:mapping path="/c/**"
|
||||
<mvc:mapping path="/**"
|
||||
allowed-origins="https://app.wisemapping.com, https://static-app.wisemapping.com/"/>
|
||||
</mvc:cors>
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user