|
|
@ -22,6 +22,7 @@ public class CorsFilter implements Filter { |
|
|
res.addHeader("Access-Control-Allow-Credentials", "true"); |
|
|
res.addHeader("Access-Control-Allow-Credentials", "true"); |
|
|
res.addHeader("Access-Control-Allow-Origin", ((HttpServletRequest) request).getHeader("origin")); |
|
|
res.addHeader("Access-Control-Allow-Origin", ((HttpServletRequest) request).getHeader("origin")); |
|
|
res.addHeader("Access-Control-Allow-Methods", "GET, POST, DELETE, PUT"); |
|
|
res.addHeader("Access-Control-Allow-Methods", "GET, POST, DELETE, PUT"); |
|
|
|
|
|
res.addHeader("Access-Control-Allow-Headers", "Content-Type,X-CAF-Authorization-Token,sessionToken,X-TOKEN,token"); |
|
|
res.addHeader("X-Frame-Options", "SAMEORIGIN"); |
|
|
res.addHeader("X-Frame-Options", "SAMEORIGIN"); |
|
|
res.addHeader("Access-Control-Allow-Headers", "Content-Type,X-CAF-Authorization-Token,sessionToken,X-TOKEN"); |
|
|
res.addHeader("Access-Control-Allow-Headers", "Content-Type,X-CAF-Authorization-Token,sessionToken,X-TOKEN"); |
|
|
if (((HttpServletRequest) request).getMethod().equals("OPTIONS")) { |
|
|
if (((HttpServletRequest) request).getMethod().equals("OPTIONS")) { |
|
|
|