<?xml version="1.0" encoding="UTF-8"?>
<!-- 配置不需要权限就能访问资源 css js -->
<security:http pattern="/css/**" security="none"></security:http>
<security:http pattern="/js/**" security="none"></security:http>
<security:http pattern="/img/**" security="none"></security:http>
<security:http pattern="/plugins/**" security="none"></security:http>
<security:http pattern="/template/**" security="none"></security:http>
<security:http pattern="/login.html" security="none"></security:http>
<!-- 开启springsecurity自动配置 -->
<security:http auto-config="true">
<security:headers>
<!-- same origin 同源 (协议://ip:port 一样才是同源)-->
<security:frame-options po