fix(系统): 解决xss前端问题

This commit is contained in:
Jamin
2026-08-13 09:34:58 +08:00
parent 6238658b20
commit a66e9e1441
16 changed files with 421 additions and 21 deletions

View File

@@ -4,6 +4,8 @@
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<meta http-equiv="Content-Security-Policy"
content="default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.map.baidu.com https://*.bdimg.com https://*.baidu.com; style-src 'self' 'unsafe-inline' https://*.bdimg.com https://*.baidu.com; img-src 'self' data: blob: http: https:; font-src 'self' data:; connect-src 'self' http: https: ws: wss:; frame-src 'self' http: https:; worker-src 'self' blob:; media-src 'self' blob: http: https:;">
<meta name="renderer" content="webkit">
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
<link rel="icon" href="<%= BASE_URL %>favicon.ico">