whyclxw
2024-12-03 88385f3c4747a74eb3a611648ffaa9afaa0395fa
跨域
1个文件已修改
9 ■■■■■ 已修改文件
src/main/java/com/whyc/filter/CrossDomainFilter.java 9 ●●●●● 补丁 | 查看 | 原始文档 | blame | 历史
src/main/java/com/whyc/filter/CrossDomainFilter.java
@@ -31,7 +31,7 @@
        HttpServletResponse resp= (HttpServletResponse) response;
        HttpServletRequest req= (HttpServletRequest) request;
        String origin = req.getHeader("Origin");
        if(StringUtils.isNotBlank(origin)) { //没有origin来源,不允许跨域设置
       /* if(StringUtils.isNotBlank(origin)) { //没有origin来源,不允许跨域设置
            String allowedCORSDomainList = YamlProperties.allowedCORSDomainList;
            List<String> allowedList = new LinkedList<>();
            if (!allowedCORSDomainList.equals("")) { //存在跨域白名单,判断,设置
@@ -46,8 +46,11 @@
                    resp.setHeader("Access-Control-Allow-Credentials", "true");
                }
            }
        }
        }*/
        resp.setHeader("Access-Control-Allow-Origin", "*");
        resp.setHeader("Access-Control-Allow-Headers", "X-Requested-With,content-type,token");
        resp.setHeader("Access-Control-Allow-Methods", "GET, POST");
        resp.setHeader("Access-Control-Allow-Credentials", "true");
        //只准使用GET,POST
        String method = req.getMethod().toUpperCase();
        String profileType = YamlProperties.profileType;