在spring boot项目中出现不能加载iframe
页面报一个"Refused to display 'http://......' in a frame because it set 'X-Frame-Options' to 'DENY'. "错误
解决方式:
因spring Boot采取的java config,在配置spring security的位置添加:
@Override
protected void configure(HttpSecurity http) throws Exception {
http.headers().frameOptions().disable();
http
.csrf().disable();
http
.authorizeRequests()
.anyRequest().authenticated();
http.formLogin()
.defaultSuccessUrl("/platform/index",true)
.loginPage("/login")
.permitAll()
.and()
.logout()
.logoutUrl("/logout");
http.addFilterBefore(wiselyFilterSecurityInterceptor(),FilterSecurityInterceptor.class);
}