Spring Cloud Gateway集成Actuator的安全漏洞和解决方案

https://blog.csdn.net/icansoicrazy/article/details/130227849

@@ -64,15 +64,19 @@ logging:
 logback:
 logback:
   appname: gateway-service
   appname: gateway-service
   logdir: ./log
   logdir: ./log
-# 暴露端点
+# 暴露端点安防
 management:
 management:
   endpoints:
   endpoints:
     web:
     web:
       exposure:
       exposure:
-        include: '*'
+        include: ["health", "info"] # 暴露任何健康检查与信息端点
+    gateway:
+      enabled: false
   endpoint:
   endpoint:
     health:
     health:
-      show-details: always
+      enabled: true # 启用健康检查端点
+    info:
+      enabled: true # 启用信息端点
 debug: false
 debug: false
 host:
 host:
   # 部署所在服务器操作系统名称,小写[windows/linux]
   # 部署所在服务器操作系统名称,小写[windows/linux]