From da1d6c6c6db1741779e816521054a101ff89c2bd Mon Sep 17 00:00:00 2001 From: bjdgyc Date: Fri, 25 Aug 2023 13:56:04 +0800 Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=E5=AE=89=E5=85=A8=E7=9A=84he?= =?UTF-8?q?ader=E5=A4=B4?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 1 + server/pkg/utils/secure_header.go | 8 +++++--- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index c4c67c2..e5fb56a 100644 --- a/README.md +++ b/README.md @@ -301,6 +301,7 @@ ipv4_end = "10.1.2.200" ## Discussion 添加QQ群(1): 567510628 + 添加QQ群(2): 739072205 群共享文件有相关软件下载 diff --git a/server/pkg/utils/secure_header.go b/server/pkg/utils/secure_header.go index a0a3b31..f323693 100644 --- a/server/pkg/utils/secure_header.go +++ b/server/pkg/utils/secure_header.go @@ -7,9 +7,11 @@ func SetSecureHeader(w http.ResponseWriter) { // Content-Length Date 默认已经存在 w.Header().Set("Server", "AnyLinkOpenSource") // w.Header().Set("Content-Type", "text/html; charset=utf-8") + // w.Header().Set("Transfer-Encoding", "chunked") + w.Header().Set("X-Aggregate-Auth", "1") + w.Header().Set("Cache-Control", "no-store,no-cache") w.Header().Set("Pragma", "no-cache") - w.Header().Set("Transfer-Encoding", "chunked") w.Header().Set("Connection", "keep-alive") w.Header().Set("X-Frame-Options", "deny") w.Header().Set("X-Content-Type-Options", "nosniff") @@ -17,11 +19,11 @@ func SetSecureHeader(w http.ResponseWriter) { w.Header().Set("Content-Security-Policy", "default-src 'self' 'unsafe-inline'") w.Header().Set("X-Permitted-Cross-Domain-Policies", "none") w.Header().Set("Referrer-Policy", "no-referrer") - // w.Header().Set("Clear-Site-Data", "cache,cookies,storage") w.Header().Set("Cross-Origin-Embedder-Policy", "require-corp") w.Header().Set("Cross-Origin-Opener-Policy", "same-origin") w.Header().Set("Cross-Origin-Resource-Policy", "same-origin") w.Header().Set("X-XSS-Protection", "0") - w.Header().Set("X-Aggregate-Auth", "1") w.Header().Set("Strict-Transport-Security", "max-age=31536000") + + // w.Header().Set("Clear-Site-Data", "cache,cookies,storage") }