fileupload not worked

answered 2015-12-01 13:31:38 +0800

nsaazn
25 ● 3

Hello Darksu,

I use spring-security (not to be confused with the ZK Spring security). By default, it sets X-Frame-Options to DENY.
For zk framework X-Frame-Options should be set to SAMEORIGIN:
spring security xml configuration:

<http>
    <logout logout-url="/logout" />
    <headers>
        <frame-options policy="SAMEORIGIN"/>
    </headers>
</http>

or java configuration:

@EnableWebSecurity
 public class WebSecurityConfig extends
    WebSecurityConfigurerAdapter {

@Override
protected void configure(HttpSecurity http) throws Exception {
    http
        // ...
        .headers()
            .frameOptions().sameOrigin()
            .httpStrictTransportSecurity().disable();
}
}

This configuration fixes the problem.