志愿者漏洞修复

ruoyi-admin/src/main/resources/application.yml

@@ -90,7 +90,7 @@ xss:
 
 
 knife4j:
-  enable: true
+  enable: false
   openapi:
     title: 志愿者
     description: 志愿者

ruoyi-framework/src/main/java/com/ruoyi/framework/config/SecurityConfig.java

@@ -111,7 +111,7 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
                 .antMatchers("/login", "/register", "/captchaImage").permitAll()
                 // 静态资源，可匿名访问
                 .antMatchers(HttpMethod.GET, "/", "/*.html", "/**/*.html", "/**/*.css", "/**/*.js", "/profile/**").permitAll()
-                .antMatchers("/swagger-ui.html", "/swagger-resources/**", "/webjars/**", "/*/api-docs", "/druid/**", "/zhiyuanzhe/**").permitAll()
+                .antMatchers("/swagger-ui.html", "/swagger-resources/**", "/webjars/**", "/*/api-docs").permitAll()
 //                // 放开志愿者和system接口
 //                .antMatchers("/zhiyuanzhe/**").anonymous()
 //                .antMatchers("/system/**").anonymous()