js接口安全域名上传

// 服务器端CORS配置示例（Node.js）
const express = require('express');
const app = express();

app.use((req, res, next) => {
  res.header('Access-Control-Allow-Origin', 'https://example.com');
  res.header('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
  res.header('Access-Control-Allow-Headers', 'Content-Type, Authorization');
  next();
});

app.post('/upload', (req, res) => {
  // 处理上传逻辑
});

app.listen(3000, () => {
  console.log('Server is running on port 3000');
});

// 服务器端文件大小限制配置示例（Node.js）
const multer = require('multer');
const upload = multer({ limits: { fileSize: 1024 * 1024 * 10 } }); // 限制文件大小为10MB

app.post('/upload', upload.single('file'), (req, res) => {
  // 处理上传逻辑
});

// CSRF Token验证示例（Node.js）
const csrf = require('csurf');
const csrfProtection = csrf({ cookie: true });

app.use(csrfProtection);

app.get('/csrf-token', (req, res) => {
  res.json({ csrfToken: req.csrfToken() });
});

app.post('/upload', (req, res) => {
  if (req.csrfToken() !== req.body._csrf) {
    return res.status(403).send('Invalid CSRF token');
  }
  // 处理上传逻辑
});