Cross-origin content separation between the front and back ends

Cross-origin content separation between the front and back ends
About front-end and back-end cross-origin separation 1. Support for cross-origin in spring, we just need to add this configuration in the configuration.

2. It seems that this configuration is not enough. You also need to add a filter for the project, as shown below:

package com.linktai.utils;import java.io.IOException;import javax.servlet.Filter;import javax.servlet.FilterChain;import javax.servlet.FilterConfig;import javax.servlet.ServletException;import javax.servlet.ServletRequest;import javax.servlet.ServletResponse;import javax.servlet.http.HttpServletRequest;import javax.servlet.http.HttpServletResponse;/** * Servlet Filter implementation class CrossFilter */public class CrossFilter implements Filter {  /**   * Default constructor.    */  public CrossFilter() {    // TODO Auto-generated constructor stub   }    /**     * @see Filter#destroy()     */    public void destroy() {        // TODO Auto-generated method stub    }    /**     * @see Filter#doFilter(ServletRequest, ServletResponse, FilterChain)     */    public void doFilter(ServletRequest req, ServletResponse resp, FilterChain chain)            throws IOException, ServletException {        HttpServletRequest request = (HttpServletRequest) req;        HttpServletResponse response = (HttpServletResponse) resp;        response.setHeader("Access-Control-Allow-Origin", "https://pandabox.io");    response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");     response.setHeader("Access-Control-Max-Age", "3600");     response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");     response.setHeader("Access-Control-Allow-Credentials", "true");         chain.doFilter(req, resp);    }    /**     * @see Filter#init(FilterConfig)     */    public void init(FilterConfig fConfig) throws ServletException {        // TODO Auto-generated method stub    }}