spring security4 問題

標籤：from   this   with   deny   efault   spring   標籤   代碼   head   

<headers>
            <frame-options policy="SAMEORIGIN" />
</headers>

 

spring security升級為4 的時候 會出現重新導向問題

可以在 http 標籤內添加如上的代碼解決

 

• DENY - is a default value. With this the page cannot be displayed in a frame, regardless of the site attempting to do so.
• SAMEORIGIN - I assume this is what you are looking for, so that the page will be (and can be) displayed in a frame on the same origin as the page itself
• ALLOW-FROM  Allows you to specify an origin, where the page can be displayed in a frame.

 

spring security4 問題