1

2017-10-14 10:14:08 +08:00 · 2017-10-14 10:14:08 +08:00 · df5e566756
parent 9d37e52c23
commit df5e566756
1 changed files with 2 additions and 1 deletions
--- a/src/main/java/com/boot/security/server/config/SecurityConfig.java
+++ b/src/main/java/com/boot/security/server/config/SecurityConfig.java
@ -32,7 +32,8 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
 				.permitAll().anyRequest().authenticated().and().formLogin().loginPage("/login.html")
 				.loginProcessingUrl("/login").successHandler(authenticationSuccessHandler)
 				.failureHandler(authenticationFailureHandler).and().logout().logoutUrl("/logout")
-				.logoutSuccessHandler(logoutSuccessHandler).and().csrf().disable();
+				.logoutSuccessHandler(logoutSuccessHandler).and().csrf().disable().headers().frameOptions()
+				.sameOrigin();
 	}

 	@Override