update

2025-09-13 01:08:51 +08:00
parent f65d07884f
commit d76a5ba5a5
29 changed files with 941 additions and 0 deletions
--- a/config/autoload/response.global.php
+++ b/config/autoload/response.global.php
@ -0,0 +1,11 @@
+<?php
+    return [
+        'response' => [
+            'header' => [
+                'X-XSS-Protection' => '1; mode=block',
+                'X-Content-Type-Options' => 'nosniff',
+                'Content-Security-Policy' => "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' https://* data: blob:; font-src 'self' data:;",
+                'Set-Cookie' => true,
+            ]
+        ]
+    ];