#允许跨域请求的域，*代表所有 add_header ‘Access-Control-Allow-Origin‘ *; #允许带上cookie请求 add_header ‘Access-Control-Allow-Credentials‘ ‘true‘; #允许请求的方法，比如 GET/POST/PUT/DELETE add_header ‘Access-Control-Allow-Methods‘ *; #允许请求的header add_header ‘Access-Control-Allow-Headers‘ *;
#对源站点验证
valid_referers *.imooc.com;
#非法引入会进入下方判断
if ($invalid_referer) {
return 404;
} 原文：https://www.cnblogs.com/huihui913/p/12670411.html