Commit 735634cd authored by 郑越's avatar 郑越

关闭frame option

parent 8d81d15b
......@@ -94,7 +94,8 @@ public class FlowableUiSecurityAutoConfiguration {
private static final Customizer<HeadersConfigurer<HttpSecurity>> DEFAULT_HEADERS = headers -> {
headers.frameOptions()
.sameOrigin()
.disable()
// .sameOrigin()
.addHeaderWriter(new XXssProtectionHeaderWriter());
};
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment