|
@@ -33,6 +33,7 @@ public class OriginFilter implements Filter {
|
|
HttpServletRequest request = (HttpServletRequest) servletRequest;
|
|
HttpServletRequest request = (HttpServletRequest) servletRequest;
|
|
//指定允许其他域名访问
|
|
//指定允许其他域名访问
|
|
response.setHeader("Access-Control-Allow-Origin", "*");
|
|
response.setHeader("Access-Control-Allow-Origin", "*");
|
|
|
|
+ response.setContentType("text/html;charset=UTF-8");
|
|
// 允许请求的方法
|
|
// 允许请求的方法
|
|
response.setHeader("Access-Control-Allow-Methods", "POST,GET,OPTIONS,DELETE,PUT");
|
|
response.setHeader("Access-Control-Allow-Methods", "POST,GET,OPTIONS,DELETE,PUT");
|
|
// 多少秒内,不需要再发送预检验请求,可以缓存该结果
|
|
// 多少秒内,不需要再发送预检验请求,可以缓存该结果
|
|
@@ -43,6 +44,7 @@ public class OriginFilter implements Filter {
|
|
" Content-Type, content-type,X-E4M-With,Authorization,token,authorization,share,Sec-Fetch-Mode,Sec-Fetch-Site,Sec-Fetch-Dest,sec-ch-ua-platform" +
|
|
" Content-Type, content-type,X-E4M-With,Authorization,token,authorization,share,Sec-Fetch-Mode,Sec-Fetch-Site,Sec-Fetch-Dest,sec-ch-ua-platform" +
|
|
",sec-ch-ua-mobile,sec-ch-ua,Referer,Host,Connection,Accept-Language,Accept-Encoding,Accept");
|
|
",sec-ch-ua-mobile,sec-ch-ua,Referer,Host,Connection,Accept-Language,Accept-Encoding,Accept");
|
|
response.setHeader("Access-Control-Allow-Credentials", "true");
|
|
response.setHeader("Access-Control-Allow-Credentials", "true");
|
|
|
|
+ response.setHeader("XDomainRequestAllowed","1");
|
|
if (request.getMethod().equals("OPTIONS")) {
|
|
if (request.getMethod().equals("OPTIONS")) {
|
|
response.setStatus(200);
|
|
response.setStatus(200);
|
|
response.getWriter().write("OPTIONS returns OK");
|
|
response.getWriter().write("OPTIONS returns OK");
|