qq_16972445的博客

原创 IBM AppScan 之web项目安全问题

web项目缺少各种响应头不设置 在过滤器中设置 response.addHeader(“x-frame-options”,“SAMEORIGIN”); response.addHeader(“X-XSS-Protection”,“X-XSS-Protection: 1;mode=block”); response.setHeader(“Content-Security-Policy”,“frame...