spring security 防止iframes攻击

<headers>
            <frame-options policy="SAMEORIGIN"/>
        </headers>

https://blog.csdn.net/u011121146/article/details/52872143

https://www.cnblogs.com/5426z/articles/6097324.html