修改

src/main/java/org/rcisoft/common/component/Global.java

@@ -92,7 +92,7 @@ public class Global {
     @Value("${global.path.pdf_location}")
     private String PDF_LOCATION;
 
-//    /*切割pdf路径*/
+    //    /*切割pdf路径*/
 //    @Value("${global.path.cut_pdf_location}")
 //    private String CUT_PDF_LOCATION;
 //
@@ -120,7 +120,7 @@ public class Global {
     @Value("${global.path.images_location}")
     private String IMAGES_LOCATION;
 
-//    /*课程默认图片路径*/
+    //    /*课程默认图片路径*/
 //    @Value("${global.default_location.course}")
 //    private String DEFAULT_COURSE_LOCATION;
 //
@@ -229,6 +229,13 @@ public class Global {
     @Value("${spring.redis.timeout}")
     private Integer REDIS_TIMEOUT;
 
+    /**
+     *
+     */
+    //不允许上传的文件格式
+    @Value("${cy.model.security.unsupportedFileFormat}")
+    private String unsupportedFileFormat;
+
 //    @Value("${global.path.xml_location}")
 //    private String XML_LOCATION;
 }

src/main/resources/application-conf-prod.yml

@@ -59,7 +59,7 @@ cy:
       acAllowOrigin: '*'
       acAllowMethods: 'POST, GET, OPTIONS, DELETE,PUT'
       acAllowHeaders: '*'
-      unsupportedFileFormat: ""
+      unsupportedFileFormat: ".exe,.php,.asp,.jsp,.aspx"
       permit-all:
         permitUnStatic:
           - "/static/**"

src/main/resources/application-conf-test.yml

@@ -54,7 +54,7 @@ cy:
       acAllowOrigin: '*'
       acAllowMethods: 'POST, GET, OPTIONS, DELETE,PUT'
       acAllowHeaders: '*'
-      unsupportedFileFormat: ""
+      unsupportedFileFormat: ".exe,.php,.asp,.jsp,.aspx"
       permit-all:
         permitUnStatic:
           - "/static/**"
@@ -69,7 +69,6 @@ cy:
           - "/nlttest/add/**"
           - "/pc/sysuser/checkPhoneCode"
           - "/pc/sysuser/resetPassword"
-          - "/**/**"
           - "/captcha/**"
           #- "/cros/**"
         permitStatic: [ "/", "/*.html", "/favicon.ico", "/**/*.html", "/**/*.js", "/**/*.css" ]