| | |
| | | resp.setHeader("X-XSS-Protection","1; mode=block"); |
| | | resp.setHeader("X-Download-Options","noopen"); |
| | | resp.setHeader("Strict-Transport-Security","max-age=63072000; includeSubdomains; preload"); |
| | | |
| | | resp.setHeader("Access-Control-Expose-Headers", "Content-Disposition"); |
| | | //单页面应用,只允许一个页面index.html |
| | | String servletPath = req.getServletPath(); |
| | | if(servletPath.contains(".html")){ |
| | |
| | | ".xlsx");*/ |
| | | response.addHeader(HttpHeaders.CONTENT_DISPOSITION, "attachment; filename=\"" + URLEncoder.encode (filename, "utf-8") + ".xlsx"+"\""); |
| | | response.setContentType(MediaType.APPLICATION_OCTET_STREAM_VALUE); |
| | | //response.setHeader("Access-Control-Expose-Headers", "Content-Disposition"); |
| | | |
| | | // 写入响应流并关闭 |
| | | response.getOutputStream().write(byteArrayOutputStream.toByteArray()); |
| | | response.getOutputStream().flush(); |