|
|
@@ -43,9 +43,9 @@ INSTALLED_APPS = [
|
|
|
]
|
|
|
|
|
|
MIDDLEWARE = [
|
|
|
- 'corsheaders.middleware.CorsMiddleware',
|
|
|
'django.middleware.security.SecurityMiddleware',
|
|
|
'django.contrib.sessions.middleware.SessionMiddleware',
|
|
|
+ 'corsheaders.middleware.CorsMiddleware',
|
|
|
'django.middleware.common.CommonMiddleware',
|
|
|
# 'django.middleware.csrf.CsrfViewMiddleware',
|
|
|
'django.contrib.auth.middleware.AuthenticationMiddleware',
|
|
|
@@ -137,11 +137,11 @@ USE_TZ = True
|
|
|
|
|
|
STATIC_URL = '/static/'
|
|
|
# 跨域增加忽略
|
|
|
+# 跨域增加忽略
|
|
|
CORS_ALLOW_CREDENTIALS = True
|
|
|
CORS_ORIGIN_ALLOW_ALL = True
|
|
|
-CORS_ORIGIN_WHITELIST = (
|
|
|
- '*'
|
|
|
-)
|
|
|
+CORS_ORIGIN_WHITELIST = ()
|
|
|
+
|
|
|
CORS_ALLOW_METHODS = (
|
|
|
'DELETE',
|
|
|
'GET',
|
|
|
@@ -153,8 +153,6 @@ CORS_ALLOW_METHODS = (
|
|
|
)
|
|
|
|
|
|
CORS_ALLOW_HEADERS = (
|
|
|
- 'XMLHttpRequest',
|
|
|
- 'X_FILENAME',
|
|
|
'accept',
|
|
|
'accept-encoding',
|
|
|
'authorization',
|
|
|
@@ -164,5 +162,4 @@ CORS_ALLOW_HEADERS = (
|
|
|
'user-agent',
|
|
|
'x-csrftoken',
|
|
|
'x-requested-with',
|
|
|
- 'Pragma',
|
|
|
-)
|
|
|
+)
|
chenjunkai