http的安全策略

内容安全策略(CSP)

HSTS(HTTP Strict Transport Security)

X-Content-Type-Options

X-Frame-Options

X-XSS-Protection