［安全相关］monitor帐号登录url应与servlet配置的url一致 现是固定的/druid/login.html

[yjqg6666]

druid stat数据查看　servlet配置如下

    <servlet>
        <servlet-name>StatViewServlet</servlet-name>
        <servlet-class>com.alibaba.druid.support.http.StatViewServlet</servlet-class>
        <init-param>
            <param-name>resetEnable</param-name>
            <param-value>true</param-value>
        </init-param>
        <init-param>
            <param-name>sessionStatMaxCount</param-name>
            <param-value>2000</param-value>
        </init-param>
        <init-param>
            <param-name>sessionStatEnable</param-name>
            <param-value>true</param-value>
        </init-param>
        <init-param>
            <param-name>principalSessionName</param-name>
            <param-value>DSUK</param-value>
        </init-param>
        <init-param>
            <param-name>profileEnable</param-name>
            <param-value>true</param-value>
        </init-param>
        <init-param>
            <param-name>loginUsername</param-name>
            <param-value>druidStatUser</param-value>
        </init-param>
        <init-param>
            <param-name>loginPassword</param-name>
            <param-value>Ojib_ob0Quacoig[</param-value>
        </init-param>
    </servlet>
    <servlet-mapping>
        <servlet-name>StatViewServlet</servlet-name>
        <url-pattern>/dstat/viUcujOt/*</url-pattern>
    </servlet-mapping>

登录的url不是　 /dstat/viUcujOt/login.html 而是　/druid/login.html　 这导致url-pattern只能配置为/druid/*　　安全性上会有所影响

[rxxy]

嗯是的，遇到了同样的问题