Commit 2b14e0241ff675fd781dbf44b046f47459272bae

Authored by 王通
1 parent 07e07126

1.浏览器对blob://限制的屏蔽

src/main/java/com/bsth/security/WebSecurityConfig.java
@@ -71,6 +71,10 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter { @@ -71,6 +71,10 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
71 .expiredUrl(Constants.LOGIN_PAGE + "?error=true") 71 .expiredUrl(Constants.LOGIN_PAGE + "?error=true")
72 .maxSessionsPreventsLogin(false) 72 .maxSessionsPreventsLogin(false)
73 .sessionRegistry(sessionRegistry()); 73 .sessionRegistry(sessionRegistry());
  74 + //edge游览器地图和轨迹播放不行的问题
  75 + http.headers().contentSecurityPolicy(
  76 + "script-src 'unsafe-inline' 'unsafe-eval' http: https:; worker-src blob:;"
  77 + );
74 78
75 WhiteIpFilter whiteIpFilter = new WhiteIpFilter(); 79 WhiteIpFilter whiteIpFilter = new WhiteIpFilter();
76 http.addFilterBefore(whiteIpFilter, FilterSecurityInterceptor.class); 80 http.addFilterBefore(whiteIpFilter, FilterSecurityInterceptor.class);