属性加载优化；开启 FastJSON 安全模式

common/src/main/java/com/jeesite/common/io/PropertyLoader.java

@@ -9,31 +9,40 @@ import java.util.List;
 import java.util.Properties;
 
 import org.springframework.boot.env.OriginTrackedMapPropertySource;
+import org.springframework.core.Ordered;
 import org.springframework.core.env.PropertySource;
 import org.springframework.core.io.Resource;
 
+import com.alibaba.fastjson.parser.ParserConfig;
+
 /**
  * 配置文件加载（Boot）
  * @author ThinkGem
  * @version 2018-10-16
  */
-public class PropertyLoader implements org.springframework.boot.env.PropertySourceLoader{
+public class PropertyLoader implements org.springframework.boot.env.PropertySourceLoader, Ordered{
 	
 	private static boolean isLoadPropertySource = false;
 	
 	@Override
 	public String[] getFileExtensions() {
-		return new String[] { "properties", "yml" };
+		return new String[] { "properties", "yml", "yaml" };
 	}
 	
 	@Override
 	public List<PropertySource<?>> load(String name, Resource resource) throws IOException {
 		if (!isLoadPropertySource){
 			isLoadPropertySource = true;
+			ParserConfig.getGlobalInstance().setSafeMode(true); // 开启 FastJSON 安全模式
 			Properties properties = PropertiesUtils.getInstance().getProperties();
 			return Collections.singletonList(new OriginTrackedMapPropertySource("jeesite", properties));
 		}
 		return Collections.emptyList();
 	}
+
+	@Override
+	public int getOrder() {
+		return Integer.MIN_VALUE;
+	}
 	
 }

common/src/main/resources/META-INF/spring.factories

@@ -0,0 +1,3 @@
+# PropertySource Loaders
+org.springframework.boot.env.PropertySourceLoader=\
+com.jeesite.common.io.PropertyLoader