使用
  const options {
    withCredentials: true,  // 默认 false
  }
  const eventSource = new EventSource(`/api`, options);
  eventSource.addEventListener('open', () => {});
  eventSource.onmessage = (event) => {};   // 或addEventListener('message',callback)
  eventSource.addEventListener('error', (event) => {});
注意:message 为默认事件
后端可配合前端使用自定义事件
后端配置 content-type="text/event-stream"


参考:https://www.ruanyifeng.com/blog/2017/05/server-sent_events.html









![某数据泄露防护(DLP)系统NetSecConfigAjax接口SQL注入漏洞复现 [附POC]](https://i-blog.csdnimg.cn/direct/b62a9b9d16c74d1f8be1620e3acf3b32.png)









