错误描述：
用 postman 测试接口，返回 Cannot GET /api/orders/by/user/123
打开控制台之后，发现有一个红色报错：
Refused to load the font 'http://localhost:5000/api/orders/by/user/res/Soleil.woff2' because it violates the following Content Security Policy directive: "default-src 'none'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
错误原因：
路由配置中，路径写错了，后面多了一个空格
