Web低危漏洞之缺少“X-XSS-Protection“头的处理方法

listen 9527;
server_name localhost;
add_header Content-Security-Policy: default-src=self;
add_header X-Xss-Protection: 1;
add_header X-Xss-Protection: mod=block;
add_header X-Content-Type-Options: nosniff;