跨域

whyclxw

2024-12-03 d77a35b51e2046e341cc686c99b59cb1cdf02ad5

 src/main/java/com/whyc/filter/CrossDomainFilter.java

@@ -52,14 +52,14 @@
        resp.setHeader("Access-Control-Allow-Methods", "GET, POST");
        resp.setHeader("Access-Control-Allow-Credentials", "true");
        //只准使用GET,POST
        String method = req.getMethod().toUpperCase();
       /* String method = req.getMethod().toUpperCase();
        String profileType = YamlProperties.profileType;
        if(!profileType.contains("dev") && !(method.equals("GET")||method.equals("POST"))){
            resp.setStatus(HttpServletResponse.SC_METHOD_NOT_ALLOWED);
            response.setContentType("text/html;charset=utf-8");
            response.getWriter().write("不安全的请求");
            return;
        }
        }*/
        //处理响应头缺失,信息漏洞
        /*resp.addHeader("X-Frame-Options","SAMEORIGIN");
        resp.addHeader("Referrer-Policy","origin");