has been blocked by CORS policy ，GeoServer跨域问题

GeoServer跨域问题

加载WMS时，出现：

Failed to execute ‘getImageData’ on ‘CanvasRenderingContext2D’: The canvas has been tainted by cross-origin data.

这是因为canvas.getImageData方法不支持跨域，于是在加载影像时，添加跨域许可crossOrigin:''：

 var imagery = new ol.layer.Image({
            source: new ol.source.ImageWMS({
                ratio: 1,
                url: 'http://localhost:8999/geoserver/dem/wms',
                params: {
                    'FORMAT': 'image/png',
                    'VERSION': '1.1.1',
                    "STYLES": '',
                    "LAYERS": 'dem:hhu_fill_dem',
                    "exceptions": 'application/vnd.ogc.se_inimage',
                },
                crossOrigin:''
            })
        });

但是，又报错了，报错内容是：

No ‘Access-Control-Allow-Origin’ header is present on the requested resource.

还是跨域请求的问题，geoserver已经解决了这个问题，我使用的版本是2.19.1，具体解决方式是：
打开服务器根目录下的\webapps\geoserver\WEB-INF\web.xml文件，文件里有两处被注释的跨域的配置文件：

<!--  Uncomment following filter to enable CORS in Jetty. Do not forget the second config block further down. -->
    <filter>
      <filter-name>cross-origin</filter-name>
      <filter-class>org.eclipse.jetty.servlets.CrossOriginFilter</filter-class>
      <init-param>
        <param-name>chainPreflight</param-name>
        <param-value>false</param-value>
      </init-param>
      <init-param>
        <param-name>allowedOrigins</param-name>
        <param-value>*</param-value>
      </init-param>
      <init-param>
        <param-name>allowedMethods</param-name>
        <param-value>GET,POST,PUT,DELETE,HEAD,OPTIONS</param-value>
      </init-param>
      <init-param>
        <param-name>allowedHeaders</param-name>
        <param-value>*</param-value>
      </init-param>
    </filter>
   
    
   <!-- Uncomment following filter to enable CORS in Tomcat. Do not forget the second config block further down. -->
    <!-- <filter>
      <filter-name>cross-origin</filter-name>
      <filter-class>org.apache.catalina.filters.CorsFilter</filter-class>
      <init-param>
        <param-name>cors.allowed.origins</param-name>
        <param-value>*</param-value>
      </init-param>
      <init-param>
        <param-name>cors.allowed.methods</param-name>
        <param-value>GET,POST,PUT,DELETE,HEAD,OPTIONS</param-value>
      </init-param>
      <init-param>
        <param-name>cors.allowed.headers</param-name>
        <param-value>*</param-value>
      </init-param>
    </filter> -->
   

第一处是jetty，第二处是tomcat，将第一处的注释打开，然后再将下面的跨域请求过滤的配置注释打开即可：

<!-- Uncomment following filter to enable CORS -->
    <!-- <filter-mapping>
        <filter-name>cross-origin</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping> -->