springboot Refused to display in a frame because it set 'X-Frame-Options' to 'DENY'的解决办法

àì夳堔傛蜴生んèń 2022-05-11 00:33 610阅读 0赞

这个问题是同源问题导致的，解决办法就是添加一个适配器：

package com.finup.coffee.config;
    
    import org.springframework.boot.autoconfigure.security.SecurityProperties;
    import org.springframework.context.ApplicationContextAware;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.core.annotation.Order;
    import org.springframework.http.HttpMethod;
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    
    @EnableWebSecurity
    @Order(SecurityProperties.DEFAULT_FILTER_ORDER)
    class SecurityConfig extends WebSecurityConfigurerAdapter implements ApplicationContextAware {
        @Override
        protected void configure(final HttpSecurity http) throws Exception {
    	    // 允许同源的iframe页面嵌套
            http.headers().frameOptions().sameOrigin();
            http.csrf().disable();
        }
    }

springboot Refused to display in a frame because it set 'X-Frame-Options' to 'DENY'的解决办法

发表评论取消回复

还没有评论，来说两句吧...

相关阅读

相关 Python，Django报错：Refused to display ‘url‘ in a frame because it set ‘X-Frame-Options‘ to ‘DENY‘

相关 uni-app跨域访问题Refused to display ‘ip address‘ in a frame because it set ‘X-Frame-Options‘ to ‘SAMEORIG

相关 spring boot 异常Refused to display in a frame because it set 'X-Frame-Options' to 'DENY'

相关 Refused to set unsafe header "Date"

相关解决 Refused to display in a frame because it set 'X-Frame-Options' to 'deny'.问题

相关 springboot Refused to display in a frame because it set 'X-Frame-Options' to 'DENY'的解决办法

相关 in a frame because it set 'X-Frame-Options' to 'sameorigin'.

相关 Is it possible to show some Word Document (or Excel document) in a UniGUI Frame ?

相关 cordova错误之： Refused to connect to XXX -- because it violates the following Content Security Policy..

相关 aspnet zero Refused to apply style from '...'because its MIME type ('') is not a supported styleshee