拒绝在框架中显示'因为它将'X-Frame-Options'设置为'DENY'。在jquery上加载jsp

I have working web project.

我有工作的网络项目。

I have created view controller for jsp page

我为jsp页面创建了视图控制器

When i loading jsp page into another jsp by jquery. It is passiing

当我通过jquery将jsp页面加载到另一个jsp中时。这是太过分了

Refused to display ' in a frame because it set 'X-Frame-Options' to 'DENY'.

I have imported like this...

我这样进口......

            $(".tab-content").append(
                "<div class='tab-pane' id='tab" + num_tabs + "'>"
                +"<iframe src='leads-creation' height='100%' width='100%'></iframe>"
                + "</div>"
            );

I have created view controller already

我已经创建了视图控制器

1 个解决方案

#1

The X-Frame-Options is response's header to tell the browser if run iframes or not from security issue. You can change the value of this header to ALLOW-FROM for example.

X-Frame-Options是响应的标题,告诉浏览器是否从安全问题运行iframe。例如,您可以将此标头的值更改为ALLOW-FROM。

This question explain more: How to disable 'X-Frame-Options' response header in Spring Security?

这个问题解释了更多:如何在Spring Security中禁用“X-Frame-Options”响应头?

#1