摘抄官方文档： spring boot配置 iframe同源可访问

@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
@Override
protected void configure(HttpSecurity http) throws Exception {
http
// ...
.headers().frameOptions().sameOrigin().httpStrictTransportSecurity().disable();
}
}

<http>
<!-- ... -->

<headers>
<frame-options policy="SAMEORIGIN" />
<hsts disable="true"/>
</headers>
</http>