1.浏览器对blob://限制的屏蔽

王通
1 parent 07e07126
Showing 1 changed file with 4 additions and 0 deletions
src/main/java/com/bsth/security/WebSecurityConfig.java
@@ -71,6 +71,10 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                 .expiredUrl(Constants.LOGIN_PAGE + "?error=true")
                 .maxSessionsPreventsLogin(false)
                 .sessionRegistry(sessionRegistry());
+        //edge游览器地图和轨迹播放不行的问题
+        http.headers().contentSecurityPolicy(
+                "script-src 'unsafe-inline' 'unsafe-eval' http: https:; worker-src blob:;"
+        );
  
         WhiteIpFilter whiteIpFilter = new WhiteIpFilter();
         http.addFilterBefore(whiteIpFilter, FilterSecurityInterceptor.class);