使用
const options {
withCredentials: true, // 默认 false
}
const eventSource = new EventSource(`/api`, options);
eventSource.addEventListener('open', () => {});
eventSource.onmessage = (event) => {}; // 或addEventListener('message',callback)
eventSource.addEventListener('error', (event) => {});
注意:message 为默认事件
后端可配合前端使用自定义事件
后端配置 content-type="text/event-stream"


参考:https://www.ruanyifeng.com/blog/2017/05/server-sent_events.html









![某数据泄露防护(DLP)系统NetSecConfigAjax接口SQL注入漏洞复现 [附POC]](https://i-blog.csdnimg.cn/direct/b62a9b9d16c74d1f8be1620e3acf3b32.png)








