Merge branch 'm33' into 'master'

存储型xss

See merge request !40

license/src/main/java/iot/sixiang/license/jwt/AuthenticationInterceptor.java

@@ -26,4 +26,10 @@ public class AuthenticationInterceptor implements HandlerInterceptor {
         UserUtils.removeUser();
         UserUtils.removeUri();
     }
+
+    @Override
+    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
+        response.setHeader("Set-Cookie","HttpOnly");
+        return true;
+    }
 }
\ No newline at end of file