加入安全头

src/main/java/org/sss/presentation/noui/filter/SecurityInterceptor.java

+package org.sss.presentation.noui.filter;
+
+import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+/**
+ * 设置安全头，将service层面都添加
+ */
+public class SecurityInterceptor extends HandlerInterceptorAdapter {
+
+	@Override
+	public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
+			throws Exception {
+		response.setHeader("X-Content-Type-Options", "nosniff");
+        response.setHeader("X-XSS-Protection", "1");
+        response.setHeader("Content-Security-Policy", "default-src 'self'");
+
+        return true;
+	}
+
+}