Access-Control-Allow-Origin CORS 크로스도메인 방어

CORSFilter.class

package com.boya.filter;
 
import java.io.IOException;
 
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletResponse;
 
public class CORSFilter implements Filter {
    
    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {
        HttpServletResponse hsr = (HttpServletResponse) res;
        hsr.setHeader("Access-Control-Allow-Origin", "*");
        hsr.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS");
        hsr.setHeader("Access-Control-Max-Age", "3600");
        hsr.setHeader("Access-Control-Allow-Headers", "x-requested-with, origin, content-type, accept");
        chain.doFilter(req, res);
    }
 
    public void init(FilterConfig filterConfig) throws ServletException{/**/}
 
    public void destroy() {/**/}
}

web.xml

    <filter>
        <filter-name>corsFilter</filter-name>
         <filter-class>com.boya.filter.CORSFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>corsFilter</filter-name>
        <url-pattern>/*</url-pattern>
    <filter-mapping>