CORS是一个W3C标准,全称是”跨域资源共享”(Cross-origin resource sharing)。 它允许浏览器向跨源服务器,发出XMLHttpRequest请求,从而克服了AJAX只能同源使用的限制。
1.加入CROS依赖的包
1<dependency> 2 <groupId>com.thetransactioncompany</groupId> 3 <artifactId>java-property-utils</artifactId> 4 <version>1.10</version> 5</dependency> 6<dependency> 7 <groupId>com.thetransactioncompany</groupId> 8 <artifactId>cors-filter</artifactId> 9 <version>1.9.1</version> 10</dependency>
2. web.xml 加入CORSFilter
1<filter> 2 <filter-name>CORS</filter-name> 3 <filter-class>com.thetransactioncompany.cors.CORSFilter</filter-class> 4 <init-param> 5 <param-name>cors.allowOrigin</param-name> 6 <param-value>*</param-value> 7 </init-param> 8 <init-param> 9 <param-name>cors.supportedMethods</param-name> 10 <param-value>GET, POST, HEAD, PUT, DELETE</param-value> 11 </init-param> 12 <init-param> 13 <param-name>cors.supportedHeaders</param-name> 14 <param-value>Accept, Origin, X-Requested-With, Content-Type, 15 Last-Modified</param-value> 16 </init-param> 17 <init-param> 18 <param-name>cors.exposedHeaders</param-name> 19 <param-value>Set-Cookie</param-value> 20 </init-param> 21 <init-param> 22 <param-name>cors.supportsCredentials</param-name> 23 <param-value>true</param-value> 24 </init-param> 25 </filter> 26 <filter-mapping> 27 <filter-name>CORS</filter-name> 28 <url-pattern>/*</url-pattern> 29 </filter-mapping> 30</fitler>
注意点
CORSFilter 放在最上边,最先被加载,不然无效