[WebUI]: add X-XSS-Protection, X-Content-Type-Options, CSP header

This commit is contained in:
Chocobo1
2017-02-05 12:19:47 +08:00
committed by sledgehammer999
parent f5ad04766f
commit 7756dd80f3
2 changed files with 6 additions and 0 deletions

View File

@@ -44,6 +44,9 @@ namespace Http
const QString HEADER_CONTENT_LENGTH = "Content-Length";
const QString HEADER_CACHE_CONTROL = "Cache-Control";
const QString HEADER_X_FRAME_OPTIONS = "X-Frame-Options";
const QString HEADER_X_XSS_PROTECTION = "X-XSS-Protection";
const QString HEADER_X_CONTENT_TYPE_OPTIONS = "X-Content-Type-Options";
const QString HEADER_CONTENT_SECURITY_POLICY = "Content-Security-Policy";
const QString CONTENT_TYPE_CSS = "text/css; charset=UTF-8";
const QString CONTENT_TYPE_GIF = "image/gif";