public class CrossFilter implements Filter {
  protected Logger logger = LoggerFactory.getLogger(getClass());
  @Override
  public void init(FilterConfig filterConfig) throws ServletException {
  }
  @Override
  public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
    HttpServletRequest request=(HttpServletRequest)servletRequest;
    HttpServletResponse response=(HttpServletResponse)servletResponse;
    logger.info("【允許跨域訪問(wèn)】refererUrl【{}】", request.getHeader("Referer"));
    //允許跨域訪問(wèn)
    response.setContentType("text/html;charset=UTF-8");
    response.setHeader("Access-Control-Allow-Origin", "https://monline.01zhuanche.com");
    response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
    response.setHeader("Access-Control-Max-Age", "0");
    response.setHeader("Access-Control-Allow-Headers", "Origin, No-Cache, X-Requested-With, If-Modified-Since, Pragma, Last-Modified, Cache-Control, Expires, Content-Type, X-E4M-With,userId,Authorization,SessionToken,JSESSIONID,token");
    response.setHeader("Access-Control-Allow-Credentials", "true");
    response.setHeader("XDomainRequestAllowed","1");
    filterChain.doFilter(request, response);
  }
  public static String getRefererUrl(HttpServletRequest request){
    String returnValue = null;
    if(request != null && !StringUtils.isEmpty(request.getHeader("Referer"))) {
      returnValue = request.getHeader("Referer");
      String[] urls = returnValue.split("/");
      if(urls != null && urls.length > 3) {
        returnValue = urls[0] + "http://" + urls[2];
      }
    }
    return returnValue;
  }
  @Override
  public void destroy() {
  }
}

<filter>
  <filter-name>crossDomainFilter</filter-name>
  <filter-class>com.open.advertise.api.cooperation.filter.CrossFilter</filter-class>
  <init-param>
   <param-name>targetFilterLifecycle</param-name>
   <param-value>true</param-value>
  </init-param>
 </filter>

 <filter-mapping>
  <filter-name>crossDomainFilter</filter-name>
  <url-pattern>/*</url-pattern> <!--可以針對(duì)某個(gè)接口進(jìn)行限制-->
 </filter-mapping>