From 0d2a5fc482ba7ffaaefa6276e2475727e7160753 Mon Sep 17 00:00:00 2001
From: zhizhijie <zhizhijie@users.noreply.gitee.com>
Date: 星期三, 16 九月 2026 11:31:35 +0800
Subject: [PATCH] fix(cors): 放行内网网段来源，修复局域网 IP 访问时登录 403
---
traffic-audit-server/src/main/resources/application.yml.example | 6 ++++--
1 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/traffic-audit-server/src/main/resources/application.yml.example b/traffic-audit-server/src/main/resources/application.yml.example
index f9ec2dd..dc87cf7 100644
--- a/traffic-audit-server/src/main/resources/application.yml.example
+++ b/traffic-audit-server/src/main/resources/application.yml.example
@@ -70,7 +70,9 @@
# Behavior captcha on login. Set to false to skip verification during test phase; enable before production release.
app:
cors:
- # 鍏佽璺ㄥ煙璁块棶鎺ュ彛鐨勬潵婧愶紙閫楀彿鍒嗛殧锛�
- allowed-origins: http://localhost:8080,http://127.0.0.1:8080
+ # 鍏佽璺ㄥ煙璁块棶鎺ュ彛鐨勬潵婧愶紙閫楀彿鍒嗛殧锛屾敮鎸� * 閫氶厤涓绘満涓庣鍙ｏ級锛�
+ # 娴忚鍣� POST/PUT/DELETE 蹇呭甫 Origin锛圙ET 涓嶅甫锛夛紝鏁呯敤 IP/鍩熷悕鎵撳紑椤甸潰鏃惰鏉ユ簮蹇呴』鍛戒腑姝ゅ垪琛紝鍚﹀垯 403銆�
+ # 榛樿鏀捐鏈満涓庡唴缃戠綉娈碉紱鑻ラ�氳繃鍩熷悕璁块棶锛岃鎶婅鍩熷悕锛堝惈绔彛锛夎拷鍔犲埌姝ゅ銆�
+ allowed-origins: http://localhost:*,http://127.0.0.1:*,http://192.168.*:*,http://10.*:*,http://172.*:*
captcha:
required: false
--
Gitblit v1.9.1