如何解决Restify会忽略有关错误的Nginx标头
我正在使用restify + Nginx创建服务。 Nginx正在添加诸如“ x-xss-protection”之类的安全标头
当响应返回肯定状态(例如200)时,将正确发送标头。但是,当我返回错误状态时,所有Nginx标头都将消失并且请求不会通过中间件
app.get('/',(req,res,next) => {
res.json(400,{
test: 'test',});
});
app.on('restifyError',err,cb) => {
logger.error(err);
return cb();
});
响应客户端错误:
HTTP/1.1 400 Bad Request
Connection: keep-alive
Date: Wed,11 Nov 2020 21:35:09 GMT
Content-Type: application/json
Content-Length: 17
Server: Nginx
Response-Time: 14
响应无误:
HTTP/1.1 200 OK
Connection: keep-alive
Date: Wed,11 Nov 2020 21:41:31 GMT
Content-Type: application/json
Content-Length: 17
Server: Nginx
Response-Time: 10
x-frame-options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000;
X-Content-Type-Options: nosniff
Cache-Control: no-cache,no-store,max-age=0
X-Xss-Protection: 0
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src 'none'; connect-src 'none'; object-src 'none'; media-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; frame-src 'none'; require-trusted-types-for 'script';
Feature-Policy: fullscreen 'self'
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。