1.安全加固

王通
1 parent 31c45a80
Showing 1 changed file with 5 additions and 0 deletions
src/main/java/com/bsth/filter/AccessLogFilter.java
@@ -37,6 +37,11 @@ public class AccessLogFilter extends BaseFilter {
 			HttpServletResponse response, FilterChain chain)
 			throws IOException, ServletException {
  
+		response.setHeader("Referrer-Policy", "strict-origin-when-cross-origin");
+		response.setHeader("Content-Security-Policy", "script-src * 'unsafe-inline' 'unsafe-eval'");
+		response.setHeader("X-Download-Options", "noopen");
+		response.setHeader("X-Permitted-Cross-Domain-Policies", "none");
+		response.setHeader("X-Frame-Options", "sameorigin");
 		SysUser user = null;
 		if (request.getParameter("token") != null) {
 			user = new SysUser();