HTTP Security Header Not Detected
nginx:
Add the following to your nginx.conf
add_header X-Frame-Options SAMEORIGIN;
add_header X-XSS-Protection "1; mode=block";
add_header X-Content-Type-Options nosniff;
add_header Strict-Transport-Security max-age=31536000
来源网址
还没有评论,来说两句吧...