chore: xss

kicc-platform/kicc-platform-biz/kicc-workflow-biz/src/main/java/com/cloud/kicc/workflow/config/WebSecurityConfig.java

@@ -0,0 +1,30 @@
+package com.cloud.kicc.workflow.config;
+
+import lombok.RequiredArgsConstructor;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.builders.WebSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+import org.springframework.security.web.firewall.StrictHttpFirewall;
+
+/**
+ *<p>
+ * 安全相关配置
+ *</p>
+ *
+ * @Author: wangxiang4
+ * @Since: 2023/10/26
+ */
+@Configuration
+@RequiredArgsConstructor
+public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
+
+	@Override
+	public void configure(WebSecurity web) throws Exception {
+		super.configure(web);
+		StrictHttpFirewall strictHttpFirewall = new StrictHttpFirewall();
+		strictHttpFirewall.setAllowSemicolon(true);
+		web.httpFirewall(strictHttpFirewall);
+	}
+
+
+}