解决火狐跨域请求异常

最新推荐文章于 2024-01-19 16:23:02 发布

看却花谢离恨天丶

最新推荐文章于 2024-01-19 16:23:02 发布

阅读量3.6k

点赞数 2

分类专栏：记录

本文链接：https://blog.youkuaiyun.com/link6666/article/details/88891608

版权

记录专栏收录该内容

11 篇文章

订阅专栏

@Component
@Order(-1)
@SuppressWarnings("all")
public class CORSFilter extends OncePerRequestFilter {
    @Override
    protected void doFilterInternal(
            HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
        response.addHeader("Access-Control-Allow-Origin", "*");
        response.addHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE");
        response.addHeader("Access-Control-Allow-Headers", "*");
        response.setHeader("Access-Control-Expose-Headers", "*");
        //30 min
        response.addHeader("Access-Control-Max-Age", "1800");
        //
        if (request.getMethod().equals("OPTIONS")) {
            response.setStatus(HttpStatus.OK.value());
        }
        filterChain.doFilter(request, response);
    }
}

之前配置跨域请求过滤器之后在谷歌 IE都能正确请求但是火狐显示

在百度查一下发现配置火狐security.fileuri.strict_origin_policy没有效果

后来查看了

https://developer.mozilla.org/zh-CN/docs/Web/HTTP/CORS/Errors/CORSMissingAllowHeaderFromPreflight

之后发现可能是火狐要求安全性比较高

Access-Control-Allow-Headers对应值为*时校验不通过

改为

response.addHeader("Access-Control-Allow-Headers", "Authorization, Content-Type, Depth,User-Agent, X-File-Size, X-Requested-With, X-Requested-By, If-Modified-Since, X-File-Name, X-File-Type, Cache-Control, Origin");

等将头信息具体参数都要在里边声明一下

亲测有效