diff --git a/internal/reverse/response.go b/internal/reverse/response.go index 256ef82..e1e6bfe 100644 --- a/internal/reverse/response.go +++ b/internal/reverse/response.go @@ -26,6 +26,14 @@ func (reverse *Reverse) ModifyResponse(shost string) func(response *http.Respons response.Header.Del("X-XSS-Protection") //https://stackoverflow.com/questions/27358966/how-to-set-x-frame-options-on-iframe response.Header.Del("X-Frame-Options") + + response.Header.Del("Content-Security-Policy-Report-Only") + + // 删除缓存策略 + response.Header.Del("Expires") + response.Header.Del("Last-Modified") + response.Header.Del("Date") + if response.Header.Get("Access-Control-Allow-Origin") != "" { //https://stackoverflow.com/questions/1653308/access-control-allow-origin-multiple-origin-domains if response.Request.Header.Get("Origin") != "" {