|
@@ -1,5 +1,7 @@
|
|
|
package com.iamberry.common.web;
|
|
|
|
|
|
+import org.apache.commons.lang3.StringUtils;
|
|
|
+
|
|
|
import java.io.IOException;
|
|
|
import java.util.List;
|
|
|
import java.util.Vector;
|
|
@@ -22,15 +24,16 @@ public class SimpleCORSFilter implements Filter {
|
|
|
public static List<String> origins = new Vector<String>(6);
|
|
|
|
|
|
static {
|
|
|
- origins.add("http://h5.iamberry.com");
|
|
|
- origins.add("http://test.iamberry.com");
|
|
|
- origins.add("http://m.iamberry.com");
|
|
|
- origins.add("http://www.iamberry.com");
|
|
|
- origins.add("http://www.watero.cn");
|
|
|
- origins.add("http://m.watero.cn");
|
|
|
- origins.add("http://static.watero.cn");
|
|
|
- origins.add("http://static.iamberry.com");
|
|
|
- origins.add("http://h5.iamberry.com:801");
|
|
|
+ origins.add("h5.iamberry.com");
|
|
|
+ origins.add("test.iamberry.com");
|
|
|
+ origins.add("m.iamberry.com");
|
|
|
+ origins.add("www.iamberry.com");
|
|
|
+ origins.add("www.watero.cn");
|
|
|
+ origins.add("m.watero.cn");
|
|
|
+ origins.add("static.watero.cn");
|
|
|
+ origins.add("static.iamberry.com");
|
|
|
+ origins.add("s.iamberry.com");
|
|
|
+ origins.add("h5.iamberry.com:801");
|
|
|
}
|
|
|
|
|
|
public void init(FilterConfig filterConfig) throws ServletException {
|
|
@@ -42,17 +45,16 @@ public class SimpleCORSFilter implements Filter {
|
|
|
HttpServletResponse response = (HttpServletResponse) servletResponse;
|
|
|
HttpServletRequest request = (HttpServletRequest) servletRequest;
|
|
|
String requestOrigin = request.getHeader("Origin");
|
|
|
- if (requestOrigin != null && origins.contains(requestOrigin)) {
|
|
|
+ String temp = requestOrigin == null ? null : (StringUtils.replace(StringUtils.replace(requestOrigin, "http://", ""), "https://", ""));
|
|
|
+ if (temp != null && origins.contains(temp)) {
|
|
|
response.setHeader("Access-Control-Allow-Origin", requestOrigin);
|
|
|
response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
|
|
|
response.setHeader("Access-Control-Max-Age", "3600");
|
|
|
- response.setHeader("Access-Control-Allow-Headers", "x-requested-with");
|
|
|
response.setHeader("Access-Control-Allow-Credentials", "true");
|
|
|
- }
|
|
|
+ response.setHeader("Access-Control-Allow-Headers", "x-requested-with");
|
|
|
+ }
|
|
|
filterChain.doFilter(servletRequest, servletResponse);
|
|
|
}
|
|
|
|
|
|
- public void destroy() {
|
|
|
-
|
|
|
- }
|
|
|
+ public void destroy() {}
|
|
|
}
|