如何为CORS指定响应头？

这是避免预检错误的过滤器

        @Override        protected void doFilterInternal(HttpServletRequest req, HttpServletResponse res, FilterChain chain) throws ServletException, IOException { LOG.info("Adding CORS Headers ........................");         res.setHeader("Access-Control-Allow-Origin", "*"); res.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS"); res.setHeader("Access-Control-Max-Age", "3600"); res.setHeader("Access-Control-Allow-Headers", "X-PINGOTHER,Content-Type,X-Requested-With,accept,Origin,Access-Control-Request-Method,Access-Control-Request-Headers,Authorization"); res.addHeader("Access-Control-Expose-Headers", "xsrf-token"); if ("OPTIONS".equals(req.getMethod())) {  res.setStatus(HttpServletResponse.SC_OK); } else {   chain.doFilter(req, res); }     }

从发布跨源请求阻止Spring MVC Restful Angularjs中找到它