Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

a security problem has been detected for url #1134

Closed
liuhuanhui opened this issue Jul 1, 2017 · 6 comments
Closed

a security problem has been detected for url #1134

liuhuanhui opened this issue Jul 1, 2017 · 6 comments
Assignees
@jtyjty99999
Labels
not follow template plugin: egg-security type: document

Comments

@liuhuanhui
Copy link

跳转授权说 500

a security problem has been detected for url
@popomore
Copy link
Member

popomore commented Jul 1, 2017

请给出更多信息

@jtyjty99999
Copy link
Member

出现这个错的原因是你使用redirect的域名没有在域名白名单里，请配置你的域名到白名单中。请参考 https://eggjs.org/zh-cn/core/security.html#安全威胁-钓鱼攻击-的防范

@popomore
Copy link
Member

popomore commented Jul 3, 2017

是不是提示详细点

@dead-horse
Copy link
Member

@jtyjty99999 可以在开发环境时 log 提示一下去哪里配置

@ycjcl868
Copy link

favicon.ico 请求默认会开启？

image

@atian25
Copy link
Member

atian25 commented Oct 16, 2018

https://github.com/eggjs/egg/blob/master/config/config.default.js#L168

我猜测你是覆盖掉了 egg-security 的 domainWhiteList

另外，内部问题内部钉群沟通

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jtyjty99999 jtyjty99999

Labels
not follow template plugin: egg-security type: document
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
7 participants
@atian25 @popomore @jtyjty99999 @dead-horse @ngot @liuhuanhui @ycjcl868