QR/laws_chery_serve
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix安全 不安全的跨源资源共享

Browse Source
This commit is contained in:
lijiarao
2024-09-13 11:16:11 +08:00
parent fa5de1c9c2
commit 79d6fdcce1
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
laws-base/laws-base-core/src/main/java/com/jero/config/filter/cors/CorsFilter.java
+1 -1
View File
@@ -73,7 +73,7 @@ public class CorsFilter implements Filter {
private void responseInfo(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { private void responseInfo(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
HttpServletResponse httpServletResponse = (HttpServletResponse) response; HttpServletResponse httpServletResponse = (HttpServletResponse) response;
httpServletResponse.setHeader("Access-Control-Allow-Origin", ((HttpServletRequest) request).getHeader("Origin")); httpServletResponse.setHeader("Access-Control-Allow-Origin", originIp);
httpServletResponse.setHeader("Access-Control-Allow-Credentials", "true"); httpServletResponse.setHeader("Access-Control-Allow-Credentials", "true");
httpServletResponse.setHeader("Access-Control-Allow-Methods", "POST,GET"); httpServletResponse.setHeader("Access-Control-Allow-Methods", "POST,GET");
httpServletResponse.setHeader("Access-Control-Max-Age", "3600"); httpServletResponse.setHeader("Access-Control-Max-Age", "3600");
laws-base/laws-base-core/src/main/java/com/jero/config/shiro/filters/JwtFilter.java
+1 -1
View File
@@ -28,7 +28,7 @@ public class JwtFilter extends BasicHttpAuthenticationFilter {
* 默认开启跨域设置（使用单体） * 默认开启跨域设置（使用单体）
* 微服务情况下，此属性设置为false * 微服务情况下，此属性设置为false
*/ */
private boolean allowOrigin = true; private boolean allowOrigin = false;
public JwtFilter(){} public JwtFilter(){}
public JwtFilter(boolean allowOrigin){ public JwtFilter(boolean allowOrigin){