安全
从v8.2版本开始,Filez文档中台支持使用post请求访问在线文档,参数不会暴露在请求地址中,更加安全。要使用post请求,只需要将原请求中的查询参数放到表单中,同时三方系统的token名称固定传access_token,然后借助表单发送post请求即可。参考下面的示例:
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<style type="text/css">
body {
margin: 0;
padding: 0;
overflow: hidden;
-ms-content-zooming: none;
}
#office_frame {
width: 100%;
height: 100%;
position: absolute;
top: 0;
left: 0;
right: 0;
bottom: 0;
margin: 0;
border: none;
display: block;
}
</style>
</head>
<body>
<form style="display: none;" id="office_form" name="office_form" target="office_frame" action=${url} method="post">
<input name="access_token" value="${access_token}" type="hidden" />
<input name="可选自定义参数" value="" type="hidden" />
</form>
<span id="frameholder"></span>
<script type="text/javascript">
var frameholder = document.getElementById('frameholder');
var office_frame = document.createElement('iframe');
office_frame.name = 'office_frame';
office_frame.id = 'office_frame';
office_frame.title = 'Office Frame';
office_frame.setAttribute('allowfullscreen', 'true');
office_frame.setAttribute('allow', 'fullscreen *');
frameholder.appendChild(office_frame);
var office_form = document.getElementById('office_form');
office_form.submit();
</script>
</body>
</html>