Commit ef3d3a08 authored by zengtianlai3's avatar zengtianlai3

Merge branch 'm33' into 'master'

存储型xss

See merge request !40
parents 4d2fb4bb 8e2187db
...@@ -26,4 +26,10 @@ public class AuthenticationInterceptor implements HandlerInterceptor { ...@@ -26,4 +26,10 @@ public class AuthenticationInterceptor implements HandlerInterceptor {
UserUtils.removeUser(); UserUtils.removeUser();
UserUtils.removeUri(); UserUtils.removeUri();
} }
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
response.setHeader("Set-Cookie","HttpOnly");
return true;
}
} }
\ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment