|
|
@@ -40,9 +40,9 @@ public class OriginFilter implements Filter {
|
|
|
response.setHeader("Access-Control-Max-Age", "3600");
|
|
|
// 表明它允许跨域请求包含xxx头
|
|
|
response.setHeader("Access-Control-Allow-Headers",
|
|
|
- "Origin, No-Cache, X-Requested-With, If-Modified-Since, Pragma, Last-Modified, Cache-Control, Expires,userAgent,User-Agent,version, " +
|
|
|
+ "Origin,No-Cache,X-Requested-With,If-Modified-Since, Pragma,Last-Modified,Cache-Control,Expires,userAgent,User-Agent,version, " +
|
|
|
" Content-Type, content-type,X-E4M-With,Authorization,token,authorization,share,Sec-Fetch-Mode,Sec-Fetch-Site,Sec-Fetch-Dest,sec-ch-ua-platform" +
|
|
|
- ",sec-ch-ua-mobile,sec-ch-ua,Referer,Host,Connection,Accept-Language,Accept-Encoding,Accept");
|
|
|
+ ",sec-ch-ua-mobile,sec-ch-ua,Referer,Host,Connection,Accept-Language,Accept-Encoding,Accept,Cookie");
|
|
|
response.setHeader("Access-Control-Allow-Credentials", "true");
|
|
|
response.setHeader("XDomainRequestAllowed","1");
|
|
|
if (request.getMethod().equals("OPTIONS")) {
|
lyhzzz