设置后端允许IFrame注入

lsgwr · Nov 28, 2019 · 8dfc974 · 8dfc974
1 parent 1f68b28
commit 8dfc974
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/code/backend/admin/src/main/java/com/huawei/l00379880/admin/config/WebSecurityConfig.java b/code/backend/admin/src/main/java/com/huawei/l00379880/admin/config/WebSecurityConfig.java
@@ -63,6 +63,8 @@ protected void configure(HttpSecurity http) throws Exception {
                 .antMatchers("/actuator/**").permitAll()
                 // 其他所有请求都需要身份验证
                 .anyRequest().authenticated();
+        // 允许iframe嵌套
+        http.headers().frameOptions().disable();
         // 退出登录处理器
         http.logout().logoutSuccessHandler(new HttpStatusReturningLogoutSuccessHandler());
         // token验证过滤器