By default, only same origin requests are allowed. Use {@link #setAllowedOrigins} * to specify a list of allowed origins (a list containing "*" will allow all origins). * * @author Rossen Stoyanchev diff --git a/spring-websocket/src/main/java/org/springframework/web/socket/sockjs/transport/handler/HtmlFileTransportHandler.java b/spring-websocket/src/main/java/org/springframework/web/socket/sockjs/transport/handler/HtmlFileTransportHandler.java index 1227ea4435c..87f50bfae63 100644 --- a/spring-websocket/src/main/java/org/springframework/web/socket/sockjs/transport/handler/HtmlFileTransportHandler.java +++ b/spring-websocket/src/main/java/org/springframework/web/socket/sockjs/transport/handler/HtmlFileTransportHandler.java @@ -41,7 +41,7 @@ import org.springframework.web.util.JavaScriptUtils; /** * An HTTP {@link TransportHandler} that uses a famous browser - * {@code document.domain technique}. See * stackoverflow.com/questions/1481251/what-does-document-domain-document-domain-do * for details. @@ -61,10 +61,13 @@ public class HtmlFileTransportHandler extends AbstractHttpSendingTransportHandle static { StringBuilder sb = new StringBuilder(""" -
+ + -