Access-Control-Allow-Origin漏洞解决

最新推荐文章于 2025-10-27 13:26:10 发布

原创

最新推荐文章于 2025-10-27 13:26:10 发布 · 5.1k 阅读

2 ·

CC 4.0 BY-SA版权

文章标签：

#java #intellij-idea #xr #后端

漏洞描述：

修复方式：


import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletResponse;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Component;

/**
 * @author yi wei 渗透测试的Filter类
 * @date create in 2021/11/30 10:43
 **/
@Component
@javax.servlet.annotation.WebFilter(urlPatterns = "/", filterName = "WebFilter")
public class WebFilter implements Filter {


  @Value("${allow-origin}")
  private String allowOrigin;

  @Over