xml 禁用xframes在web.xml中添加此项（如果yeoman使用yo web.xml）。在tomcat中我们可以在/ opt / tomcat / webapps / ROOT / WEB-

Posted 2021-05-17

  <filter>
        <filter-name>httpHeaderSecurity</filter-name>
        <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
        <async-supported>true</async-supported>
        <init-param>
          <param-name>antiClickJackingEnabled</param-name>
          <param-value>true</param-value>
        </init-param>
        <init-param>
          <param-name>antiClickJackingOption</param-name>
          <param-value>DENY</param-value>
        </init-param>
       </filter>
       <filter-mapping>
                <filter-name>httpHeaderSecurity</filter-name>
                    <url-pattern>/*</url-pattern>
       </filter-mapping>