2017-02-18 17:07:32 +08:00
|
|
|
<?php
|
2022-05-24 00:13:20 +08:00
|
|
|
header("Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; frame-src 'none'");
|
2017-02-18 17:07:32 +08:00
|
|
|
header("X-XSS-Protection: 1; mode=block");
|
|
|
|
|
header("X-Content-Type-Options: nosniff");
|
|
|
|
|
header("X-Frame-Options: DENY");
|
