smtweb:
  machine-id: 1
  enable-job: true
  file:
    local-path: /data/sw/files/
    url: http://127.0.0.1:8888/sw/files/
    #访问路径,需/结尾
    attach-http-path: 'http://bjjt.jujiatech.cn/files/'
    #此配置原则上可以和local-path一致，可本机路径可ftp附件路径,需/结尾
    attach-path: /jjkj/attach/
    #临时文件路径,需/结尾
    attach-temp-path: /jujia/tomcat_api/webapps/files/tempFile/
    #附件上传方式 sftp/ftp/local
    attach-type: sftp
    #ftp IP地址
    attach-ftp-ip: 172.26.60.191
    #ftp 端口
    attach-ftp-port: 22
    #ftp 用户名
    attach-ftp-user: gzhfile
    #ftp 密码
    attach-ftp-pwd: Bjjt@2021
  bpm:
#   有.idea或pom.xml文件的目录
    code-java-path: 'd:/work/smtweb2/smtweb-framework'
#   读取模式 1-读取pom.xml，要求module名同目录 2-读取.idea/modules.xml
    mode: 1
  db:
    type: mysql
    default:
      rule:
        prefix: _smt_
        replace: smt_
server:
  port: 8888
  servlet:
    context-path: /
logging:
  level:
    root: INFO
    cc.smtweb: DEBUG
spring:
  redis:
    host: 127.0.0.1
    port: 6379
    password:
  datasource:
    driver-class-name: com.mysql.cj.jdbc.Driver
    url: jdbc:mysql://139.9.38.43:6032/smt?useUnicode=true&characterEncoding=utf-8&allowMultiQueries=true&useSSL=false
#    url: jdbc:mysql://127.0.0.1:3306/smt?useUnicode=true&characterEncoding=utf-8&allowMultiQueries=true&useSSL=false
    username: root
    password: Ncmz@2022_jjkj
#    password: ssqsoft
  servlet:
    multipart:
      max-file-size: 104857600000
      max-request-size: 10485760000000
  cache:
    type: caffeine
    cache-names:
      - core
      - bpm
    caffeine:
      spec: maximumSize=1024,expireAfterWrite=2h


# http 规则配置
http-config:
  xss: #xss 规则
    checkHeader: false #是否进行header校验
    checkParameter: true #是否进行parameter校验
    logIs: true #是否记录日志
    chain: true #是否中断请求
    replace: true #是否开启特殊字符替换
    checkUrl: true #是否开启特殊url校验
    regex:
      # 匹配含有字符： alert( )
      - .*[A|a][L|l][E|e][R|r][T|t](.*).*
      # 匹配含有字符： window.location
      - .*[W|w][I|i][N|n][D|d][O|o][W|w].[L|l][O|o][C|c][A|a][T|t][I|i][O|o][N|n].*
      # 匹配含有字符：style = x:ex pression ( )
      - .*[S|s][T|t][Y|y][L|l][E|e]\\s*=.*[X|x]:[E|e][X|x].*[P|p][R|r][E|e][S|s]{1,2}[I|i][O|o][N|n]\\s*\\(.*\\).*
      # 匹配含有字符： document.cookie
      - .*[D|d][O|o][C|c][U|u][M|m][E|e][N|n][T|t].[C|c][O|o]{2}[K|k][I|i][E|e].*
      # 匹配含有字符： eval( )
      - .*[E|e][V|v][A|a][L|l](.*).*
      # 匹配含有字符： unescape()
      - .*[U|u][N|n][E|e][S|s][C|c][A|a][P|p][E|e](.*).*
      # 匹配含有字符： execscript( )
      - .*[E|e][X|x][E|e][C|c][S|s][C|c][R|r][I|i][P|p][T|t](.*).*
      # 匹配含有字符： msgbox( )
      - .*[M|m][S|s][G|g][B|b][O|o][X|x](.*).*
      # 匹配含有字符： confirm( )
      - .*[C|c][O|o][N|n][F|f][I|i][R|r][M|m](.*).*
      # 匹配含有字符： prompt( )
      - .*[P|p][R|r][O|o][M|m][P|p][T|t](.*).*
      # 匹配含有字符： <script> </script>
      - .*<[S|s][C|c][R|r][I|i][P|p][T|t]>.*.*</[S|s][C|c][R|r][I|i][P|p][T|t]>.*
      # 匹配含有字符： </script>
      - .*</[S|s][C|c][R|r][I|i][P|p][T|t]>.*
      # 匹配含有字符： <script>
      - .*<[S|s][C|c][R|r][I|i][P|p][T|t]>.*
  res: # 响应头规则
    configs:
      {
        Set-Cookie: Secure; HttpOnly,
        Referrer-Policy: origin-when-cross-origin,
        X-Frame-Options: SAMEORIGIN,
        X-XSS-Protection: 1;mode=block ,
        X-Download-Options: SAMEORIGIN ,
        X-Content-Type-Options: nosniff ,
        Content-Security-Policy: default-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://localhost:7102  https://localhost:7102; style-src 'self' 'unsafe-inline'; connect-src 'self';font-src 'self' data:; ,
        Strict-Transport-Security: max-age=31536000;includeSubDomains ,
        X-Permitted-Cross-Domain-Policies: master-only
      }
