提交配置校验

portal-manager/src/main/java/com/mortals/xhx/base/framework/filter/SameSiteCookieFilter.java

@@ -32,20 +32,21 @@ public class SameSiteCookieFilter implements Filter {
         String []  allowDomain= {"localhost","192.168.0.98"};
         Set allowedOrigins= new HashSet(Arrays.asList(allowDomain));
         String originHeader=((HttpServletRequest) request).getHeader("Origin");
-
-        URI host = URLUtil.getHost(new URL(originHeader));
-        String origin =  host.getHost();
-
-        if (allowedOrigins.contains(origin)){
-            httpResponse.setHeader("Access-Control-Allow-Origin", originHeader);
-            httpResponse.setContentType("application/json;charset=UTF-8");
-            httpResponse.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
-            httpResponse.setHeader("Access-Control-Max-Age", "3600");
-            httpResponse.setHeader("Access-Control-Allow-Headers", "Content-Type,Access-Token");
-            // 如果要把Cookie发到服务器，需要指定Access-Control-Allow-Credentials字段为true
-            httpResponse.setHeader("Access-Control-Allow-Credentials", "true");
-            httpResponse.setHeader("Access-Control-Expose-Headers", "*");
+        if(!ObjectUtils.isEmpty(originHeader)){
+            URI host = URLUtil.getHost(new URL(originHeader));
+            String origin =  host.getHost();
+            if (allowedOrigins.contains(origin)){
+                httpResponse.setHeader("Access-Control-Allow-Origin", originHeader);
+                httpResponse.setContentType("application/json;charset=UTF-8");
+                httpResponse.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
+                httpResponse.setHeader("Access-Control-Max-Age", "3600");
+                httpResponse.setHeader("Access-Control-Allow-Headers", "Content-Type,Access-Token");
+                // 如果要把Cookie发到服务器，需要指定Access-Control-Allow-Credentials字段为true
+                httpResponse.setHeader("Access-Control-Allow-Credentials", "true");
+                httpResponse.setHeader("Access-Control-Expose-Headers", "*");
+            }
         }
+
         chain.doFilter(request, response);
     }