usually our home page routes are intercepted in this way
@Controller
@RequestMapping("/")
public class index {
@RequestMapping(method = {RequestMethod.GET})
public ModelAndView index() {
return new ModelAndView("view/index");
}
} this allows you to intercept routes such as localhost/
, but it has recently been found that it can also be intercepted: localhost/.admin
notice that there is a dot in front of admin.
this problem is fine in springboot2.0, which returns 404.
I tested with springboot1.5.4.
Why do you say this? Because now a lot of vulnerability scanning software, will think that this belongs to the existence of system hidden files, that is, your system has been compromised.
is so cramped that I don"t know how to fix it.