2019-09-23 安全漏洞之Springboot版本升级

将springboot从1.5.15.RELEASE升级为2.1.6.RELEASE

1.5.15版本的配置

import java.util.ArrayList;
import java.util.List;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.boot.autoconfigure.condition.ConditionalOnWebApplication;
import org.springframework.boot.context.embedded.EmbeddedServletContainerCustomizer;
import org.springframework.boot.web.servlet.ErrorPage;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.http.HttpStatus;
import org.springframework.web.multipart.MultipartResolver;
import org.springframework.web.multipart.commons.CommonsMultipartResolver;

/**
 * WEB配置
 */
@Configuration
@ConditionalOnWebApplication
public class WebConfiguration {

	private static final Logger log = LoggerFactory.getLogger(WebConfiguration.class);

	@Bean
	public MultipartResolver multipartResolver() {
		log.info("To set max uploaded file size: {}", "200MB");
		CommonsMultipartResolver cmr = new CommonsMultipartResolver();
		cmr.setMaxUploadSize(1024 * 1024 * 200);
		return cmr;
	}

	@Bean
	public EmbeddedServletContainerCustomizer containerCustomizer() {
		List<ErrorPage> epList = new ArrayList<ErrorPage>();
		for (HttpStatus status : HttpStatus.values()) {
			if(status.value() >= 400){
				epList.add(new ErrorPage(status, "/platform/error/" + status.value()));
			}
		}
		return (container -> {
			ErrorPage[] array = new ErrorPage[epList.size()];
			ErrorPage[] epArray = epList.toArray(array);
			container.addErrorPages(epArray);
		});
	}

}

2.1.6配置

import java.util.ArrayList;
import java.util.List;


import org.springframework.boot.autoconfigure.condition.ConditionalOnWebApplication;
import org.springframework.boot.web.server.ErrorPage;
import org.springframework.boot.web.server.ErrorPageRegistrar;
import org.springframework.boot.web.server.ErrorPageRegistry;
import org.springframework.context.annotation.Configuration;
import org.springframework.http.HttpStatus;

/**
 * WEB配置
 */
@Configuration
@ConditionalOnWebApplication
public class WebConfiguration implements ErrorPageRegistrar {

	@Override
	public void registerErrorPages(ErrorPageRegistry registry) {
		List<ErrorPage> epList = new ArrayList<>();
		for (HttpStatus status : HttpStatus.values()) {
			if (status.value() >= 400) {
				epList.add(new ErrorPage(status, "/platform/error/" + status.value()));
			}
		}
		ErrorPage[] array = new ErrorPage[epList.size()];
		ErrorPage[] epArray = epList.toArray(array);
		registry.addErrorPages(epArray);
	}

}