springBoot springSecurty: x-frame-options deny禁止iframe调用

时间 2019-11-20

标签 springboot springsecurty frame options deny 禁止 iframe 调用栏目 Spring 繁體版

原文原文链接

springBoot springSecurty: x-frame-options deny禁止iframe调用html

https://blog.csdn.net/whiteforever/article/details/73201586spring

项目中用到iframe嵌入网页，而后用到springsecurity就被拦截了浏览器报错 x-frame-options deny 浏览器

缘由是由于springSecurty使用X-Frame-Options防止网页被Frameui

.headers().frameOptions().disable()

解决办法把x-frame-options disable便可.net

 protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
                .anyRequest().authenticated()
                .and()
                .formLogin().defaultSuccessUrl("/swagger-ui.html").failureUrl("/login") //登陆成功以后的跳转
                .permitAll()
                .and()
                .headers().frameOptions().disable()
                .and()
                .logout().logoutSuccessUrl("/login")
                .permitAll();
    }