qq_16972445的博客

web项目缺少各种响应头不设置 在过滤器中设置response.addHeader(“x-frame-options”,“SAMEORIGIN”);response.addHeader(“X-XSS-Protection”,“X-XSS-Protection: 1;mode=block”);response.setHeader(“Content-Security-Policy”,“frame...