javaEE跨域过滤器

import org.springframework.web.filter.OncePerRequestFilter;import javax.servlet.FilterChain;import javax.servlet.ServletException;import javax.servlet.http.HttpServletRequest;import javax.servlet.http.HttpServletResponse;import java.io.IOException;import java.util.Arrays;import java.util.HashSet;import java.util.Set;public class CorsFilter extends OncePerRequestFilter {    @Override    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)            throws ServletException, IOException {        boolean isOpenAllowDomain = false;//是否开启域名列表，默认不开启，自己改成true就开启了        if (isOpenAllowDomain) {            String[] allowDomain = { "http://192.168.0.77:8888",                     "http://localhost:8080", "http://127.0.0.1:8080", "http://localhost" };            Set<String> allowedOrigins = new HashSet<String>(Arrays.asList(allowDomain));            String originHeader = request.getHeader("Origin");            System.out.println("-------------------"+originHeader);            if (!originHeader.startsWith("http") || allowedOrigins.contains(originHeader)) {                addAllowedOriginHeader(request, response);            }        }else{            addAllowedOriginHeader(request, response);        }        filterChain.doFilter(request, response);    }    public void addAllowedOriginHeader(HttpServletRequest request, HttpServletResponse response) {        response.addHeader("Access-Control-Allow-Origin", request.getHeader("Origin"));        if (request.getHeader("Access-Control-Request-Method") != null && "OPTIONS".equals(request.getMethod())) {            // CORS "pre-flight" request            response.addHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE,OPTIONS");            response.addHeader("Access-Control-Allow-Headers", "X-Requested-With,Origin,Content-Type, Accept");            response.setHeader("Access-Control-Allow-Credentials", "true");        }        response.addHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE,OPTIONS");        response.addHeader("Access-Control-Allow-Headers", "X-Requested-With,Origin,Content-Type, Accept");        response.setHeader("Access-Control-Allow-Credentials", "true");    }}