最简单的方法就是添加这么一句

response.setHeader("Access-Control-Allow-Origin", "*");

也可以添加拦截器

@Interceptorpublic class SimpleCORSFilter implements HandlerInterceptor  {    @Override    public boolean preHandle(HttpServletRequest request,            HttpServletResponse response, Object handler) throws Exception {        // TODO Auto-generated method stub        return false;    }    @Override    public void postHandle(HttpServletRequest req,            HttpServletResponse resp, Object handler,            ModelAndView modelAndView) throws Exception {        resp.setHeader("Access-Control-Allow-Origin", "*");         resp.setHeader("Access-Control-Allow-Methods", "*");        resp.setHeader("Access-Control-Allow-Headers", "Content-Type,XFILENAME,XFILECATEGORY,XFILESIZE");        resp.setHeader("Access-Control-Max-Age", "3600");        if (req.getMethod().equals("OPTIONS")) {            resp.setStatus(HttpStatus.SC_OK);            resp.getWriter().write("OPTIONS returns OK");        }    }    @Override    public void afterCompletion(HttpServletRequest request,            HttpServletResponse response, Object handler, Exception ex)            throws Exception {        // TODO Auto-generated method stub            }}

 

                 
      
       org.apache.httpcomponents
                  
      
       httpcore
                  
      
       4.4.5
              
     

 大家觉得不错的话可以支持一下