今天突然接手一个万年JSP SSM的老项目，在项目启动 tomcat报错javax.servlet.ServletException: It is not allowed to configure supportsCredentials=[true] when allowedOrigins=[*]。报错信息很明显 就是cors.allowed.origins= * 和cors.support.credentials=true冲突了 看了下网上的解决方法说是tomcat版本过高引起的问题。自己的版本是7.0应该没问题，最后找了半天和web.xml配置的CorsFilter有关系，试着注释掉然后就跑起来了。

严重: Exception starting filter CorsFilter
javax.servlet.ServletException: It is not allowed to configure supportsCredentials=[true] when allowedOrigins=[*]at org.apache.catalina.filters.CorsFilter.parseAndStore(CorsFilter.java:809)at org.apache.catalina.filters.CorsFilter.init(CorsFilter.java:190)at org.apache.catalina.core.ApplicationFilterConfig.initFilter(ApplicationFilterConfig.java:285)at org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:266)at org.apache.catalina.core.ApplicationFilterConfig.<init>(ApplicationFilterConfig.java:108)at org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:5037)at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5739)at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145)at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1707)at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1697)at java.util.concurrent.FutureTask.run(Unknown Source)at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)at java.lang.Thread.run(Unknown Source)

web.xml配置文件:

在67行左右的样子把org.apache.catalina.filters.CorsFilter注释掉。

<listener>
 <listener-class>org.apache.catalina.filters.CorsFilter</listener-class>-->
</listener>

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
version="3.1"><display-name>railway</display-name><context-param><param-name>webAppRootKey</param-name><param-value>spring.webapp.root</param-value></context-param><context-param><param-name>contextConfigLocation</param-name><param-value>classpath:spring-config.xml</param-value></context-param><filter><filter-name>CorsFilter</filter-name><filter-class>org.apache.catalina.filters.CorsFilter</filter-class><init-param><param-name>cors.allowed.origins</param-name><param-value>*</param-value></init-param><init-param><param-name>cors.allowed.methods</param-name><param-value>GET,POST,HEAD,OPTIONS,PUT</param-value></init-param><init-param><param-name>cors.allowed.headers</param-name><param-value>Content-Type,X-Requested-With,accept,Origin,Access-Control-Request-Method,Access-Control-Request-Headers</param-value></init-param><init-param><param-name>cors.exposed.headers</param-name><param-value>Access-Control-Allow-Origin,Access-Control-Allow-Credentials</param-value></init-param><init-param><param-name>cors.support.credentials</param-name><param-value>false</param-value></init-param><init-param><param-name>cors.preflight.maxage</param-name><param-value>10</param-value></init-param></filter><filter-mapping><filter-name>CorsFilter</filter-name><url-pattern>/*</url-pattern></filter-mapping><filter><filter-name>CharacterEncodingFilter</filter-name><filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class><init-param><param-name>encoding</param-name><param-value>UTF-8</param-value></init-param><init-param><param-name>forceEncoding</param-name><param-value>true</param-value></init-param></filter><filter-mapping><filter-name>CharacterEncodingFilter</filter-name><url-pattern>/*</url-pattern></filter-mapping><listener><listener-class>org.springframework.web.context.ContextLoaderListener</listener-class></listener><!--<listener>--><!--<listener-class>org.apache.catalina.filters.CorsFilter</listener-class>--><!--</listener>--><servlet><description>spring mvc servlet</description><servlet-name>springMvc</servlet-name><servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class><init-param><description>spring mvc 配置文件</description><param-name>contextConfigLocation</param-name><param-value>classpath:spring-mvc.xml</param-value></init-param><load-on-startup>1</load-on-startup></servlet><servlet-mapping><servlet-name>springMvc</servlet-name><url-pattern>/</url-pattern></servlet-mapping><session-config><session-timeout>1</session-timeout></session-config><filter><filter-name>shiroFilter</filter-name><filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class><async-supported>true</async-supported><init-param><param-name>targetFilterLifecycle</param-name><param-value>true</param-value></init-param></filter><listener><listener-class>org.springframework.web.context.request.RequestContextListener</listener-class></listener><!--<listener>--><!--<listener-class>com.railway.modules.common.AppContextListener</listener-class>--><!--</listener>--><filter-mapping><filter-name>shiroFilter</filter-name><url-pattern>/*</url-pattern><dispatcher>REQUEST</dispatcher></filter-mapping><filter><filter-name>DruidWebStatFilter</filter-name><filter-class>com.alibaba.druid.support.http.WebStatFilter</filter-class><async-supported>true</async-supported><init-param><param-name>exclusions</param-name><param-value>/static/*,*.js,*.gif,*.jpg,*.png,*.css,*.ico,/druid/*</param-value></init-param><init-param><param-name>principalSessionName</param-name><param-value>username</param-value></init-param></filter><filter-mapping><filter-name>DruidWebStatFilter</filter-name><url-pattern>/*</url-pattern></filter-mapping><servlet><servlet-name>DruidStatView</servlet-name><servlet-class>com.alibaba.druid.support.http.StatViewServlet</servlet-class><async-supported>true</async-supported></servlet><servlet-mapping><servlet-name>DruidStatView</servlet-name><url-pattern>/admin/sys/monitor/druid/*</url-pattern></servlet-mapping><filter><filter-name>JCaptchaFilter</filter-name><filter-class>com.railway.modules.common.jcaptcha.JCaptchaFilter</filter-class><async-supported>true</async-supported></filter><filter-mapping><filter-name>JCaptchaFilter</filter-name><url-pattern>/jcaptcha.jpg</url-pattern></filter-mapping><filter><filter-name>sitemeshFilter</filter-name><filter-class>com.opensymphony.sitemesh.webapp.SiteMeshFilter</filter-class></filter><filter-mapping><filter-name>sitemeshFilter</filter-name><url-pattern>/*</url-pattern></filter-mapping><welcome-file-list><welcome-file>index.jsp</welcome-file></welcome-file-list>
</web-app>