过等保常用配置

1. Content-Security-Policy 0
   
2. HttpOnly true
   
3. Referrer-Policy origin-when-cross-origin
   
4. Strict-Transport-Security max-age=31536000
   
5. X-Content-Type-Options nosniff
   
6. X-Download-Options noopen
   
7. X-Frame-Options  SAMEORIGIN
   
8. X-Permitted-Cross-Domain-Policies master-only
   
9. X-Powered-By ASP.NET
   
10. X-XSS-Protection 1;mode=block

复制代码