fix安全 不安全的跨源资源共享

laws-base/laws-base-core/src/main/java/com/jero/config/filter/cors/CorsFilter.java

@@ -73,7 +73,7 @@ public class CorsFilter implements Filter {
 
     private void responseInfo(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
         HttpServletResponse httpServletResponse = (HttpServletResponse) response;
-        httpServletResponse.setHeader("Access-Control-Allow-Origin", ((HttpServletRequest) request).getHeader("Origin"));
+        httpServletResponse.setHeader("Access-Control-Allow-Origin", originIp);
         httpServletResponse.setHeader("Access-Control-Allow-Credentials", "true");
         httpServletResponse.setHeader("Access-Control-Allow-Methods", "POST,GET");
         httpServletResponse.setHeader("Access-Control-Max-Age", "3600");

laws-base/laws-base-core/src/main/java/com/jero/config/shiro/filters/JwtFilter.java

@@ -28,7 +28,7 @@ public class JwtFilter extends BasicHttpAuthenticationFilter {
      * 默认开启跨域设置（使用单体）
      * 微服务情况下，此属性设置为false
      */
-    private boolean allowOrigin = true;
+    private boolean allowOrigin = false;
 
     public JwtFilter(){}
     public JwtFilter(boolean allowOrigin){