https://zhangdapeng.dev/tags/%E6%BC%8F%E6%B4%9E/Recent content in 漏洞 on Dapeng ZhangHugo -- gohugo.ioen-usTue, 15 Jul 2025 10:28:50 +0000https://zhangdapeng.dev/p/web-wang-zhan-an-quan-lou-dong-fang-hu/Tue, 15 Jul 2025 10:28:50 +0000https://zhangdapeng.dev/p/web-wang-zhan-an-quan-lou-dong-fang-hu/<p>最近网站被发现有漏洞，网安管的越来越严格了</p> <p>简单说就是需要做一些基本的配置</p> <p>配置如下</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>server_tokens off; <span style="color:#75715e"># 隐藏版本号</span> </span></span><span style="display:flex;"><span>proxy_hide_header X-Powered-By; <span style="color:#75715e"># 关闭 x-powerd-by</span> </span></span><span style="display:flex;"><span>proxy_cookie_path / <span style="color:#e6db74">&#34;/; Path=/; Secure; HttpOnly&#34;</span>; </span></span><span style="display:flex;"><span>add_header Strict-Transport-Security <span style="color:#e6db74">&#34;max-age=63072000; includeSubdomains; preload&#34;</span>; </span></span><span style="display:flex;"><span>add_header X-Frame-Options SAMEORIGIN; </span></span><span style="display:flex;"><span>add_header Content-Security-Policy <span style="color:#e6db74">&#34;default-src &#39;self&#39; *.qeeniao.com; script-src &#39;self&#39; &#39;unsafe-inline&#39; &#39;unsafe-hashes&#39; *.qeeniao.com https://hm.baidu.com; style-src &#39;self&#39; &#39;unsafe-inline&#39; &#39;unsafe-hashes&#39; *.qeeniao.com&#34;</span>; </span></span><span style="display:flex;"><span>add_header X-XSS-Protection <span style="color:#e6db74">&#34;1; mode=block&#34;</span>; </span></span><span style="display:flex;"><span>add_header X-Content-Type-Options nosniff; </span></span><span style="display:flex;"><span>add_header Cache-Control max-age<span style="color:#f92672">=</span>3600; </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span><span style="color:#66d9ef">if</span> <span style="color:#f92672">(</span>$request_method ~* OPTIONS<span style="color:#f92672">)</span> <span style="color:#f92672">{</span> </span></span><span style="display:flex;"><span> <span style="color:#66d9ef">return</span> 403; </span></span><span style="display:flex;"><span><span style="color:#f92672">}</span> </span></span></code></pre></div><p>只要在nginx的配置中加入这几项</p>