关于Host 头注入漏洞、HTTP 响应头X-Content-Type-Options缺失漏洞、HTTP 响应头X... » 安全头.txt
| 1 |
apusic.http.header.X-Frame-Options.Enable=true |
|---|---|
| 2 |
|
| 3 |
com.apusic.cookie.noSecurity=false |
| 4 |
|
| 5 |
apusic.http.header.customSize=7 |
| 6 |
|
| 7 |
apusic.http.header.name.1=X-Content-Type-Options |
| 8 |
|
| 9 |
apusic.http.header.value.1=nosniff |
| 10 |
|
| 11 |
apusic.http.header.name.2=X-XSS-Protection |
| 12 |
|
| 13 |
apusic.http.header.value.2=1;mode=block |
| 14 |
|
| 15 |
apusic.http.header.name.3=Content-Security-Policy |
| 16 |
|
| 17 |
apusic.http.header.value.3=default-src 'self'; script-src 'self' |
| 18 |
|
| 19 |
apusic.http.header.name.4=Cache-Control |
| 20 |
|
| 21 |
apusic.http.header.value.4=no-cache |
| 22 |
|
| 23 |
apusic.http.header.name.5=Cache-Control |
| 24 |
|
| 25 |
apusic.http.header.value.5=no-store |
| 26 |
|
| 27 |
apusic.http.header.name.6=Pragma |
| 28 |
|
| 29 |
apusic.http.header.value.6=no-cache |
| 30 |
|
| 31 |
apusic.http.header.name.7=Strict-Transport-Security |
| 32 |
|
| 33 |
apusic.http.header.value.7=max-age=31 |