mirror of https://github.com/halo-dev/halo
Config freemarker with safer resolver
parent
568e48733f
commit
dc3a73ee02
|
@ -1,6 +1,7 @@
|
||||||
package run.halo.app.config;
|
package run.halo.app.config;
|
||||||
|
|
||||||
import com.fasterxml.jackson.databind.ObjectMapper;
|
import com.fasterxml.jackson.databind.ObjectMapper;
|
||||||
|
import freemarker.core.TemplateClassResolver;
|
||||||
import freemarker.template.TemplateException;
|
import freemarker.template.TemplateException;
|
||||||
import freemarker.template.TemplateExceptionHandler;
|
import freemarker.template.TemplateExceptionHandler;
|
||||||
import lombok.extern.slf4j.Slf4j;
|
import lombok.extern.slf4j.Slf4j;
|
||||||
|
@ -131,6 +132,9 @@ public class WebMvcAutoConfiguration implements WebMvcConfigurer {
|
||||||
|
|
||||||
// Predefine configuration
|
// Predefine configuration
|
||||||
freemarker.template.Configuration configuration = configurer.createConfiguration();
|
freemarker.template.Configuration configuration = configurer.createConfiguration();
|
||||||
|
|
||||||
|
configuration.setNewBuiltinClassResolver(TemplateClassResolver.SAFER_RESOLVER);
|
||||||
|
|
||||||
if (haloProperties.isProductionEnv()) {
|
if (haloProperties.isProductionEnv()) {
|
||||||
configuration.setTemplateExceptionHandler(TemplateExceptionHandler.RETHROW_HANDLER);
|
configuration.setTemplateExceptionHandler(TemplateExceptionHandler.RETHROW_HANDLER);
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue