使用 HTTP 动词篡改的认证旁路

老李

如图所示，请教怎么处理

jishuang

https://blog.csdn.net/w8452960/article/details/52065946

老李

jishuang 发表于 2019-4-2 15:04
https://blog.csdn.net/w8452960/article/details/52065946

请问下x5写拦截器在哪写？  在tomcat的web.xml加  
<security-constraint>
    <web-resource-collection>
        <http-method>HEAD</http-method>
        <http-method>PUT</http-method>
        <http-method>DELETE</http-method>
        <http-method>OPTIONS</http-method>
        <http-method>TRACE</http-method>
        <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
        <role-name></role-name>
    </auth-constraint>
</security-constraint>
这个没有用哦

jishuang

前端的就写到UIServer的web.xml下