Clickjacking & XSS in WebSecurityConfig: frameOptions.disable() fix with CSP

github.com 2026-09-12 查看中文 →

Security Advisory Medium mogu_blog_v2

Affected:

mogu_blog_v2/mogu_search/src/main/java/com/moxi/mogublog/search/config/WebSecurityConfig.java@025d78c7ac7e19b1abf796fa3cc158d855723d15
mogu_search

Referenced CVEs: CVE-2026-89261 · 6.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.