{"id":2518,"date":"2019-09-01T09:24:40","date_gmt":"2019-09-01T01:24:40","guid":{"rendered":"https:\/\/blog.naibabiji.com\/?p=2518"},"modified":"2019-11-01T10:01:07","modified_gmt":"2019-11-01T02:01:07","slug":"fang-zhi-iframe-yin-yong","status":"publish","type":"post","link":"https:\/\/blog.naibabiji.com\/skill\/fang-zhi-iframe-yin-yong.html","title":{"rendered":"\u7f51\u7ad9\u9632\u6b62\u88ab\u5176\u4ed6\u7ad9iframe\u6846\u67b6\u5f15\u7528\u955c\u50cf\u7684\u65b9\u6cd5"},"content":{"rendered":"

\u81ea\u5df1\u8f9b\u8f9b\u82e6\u82e6\u5efa\u7684\u7f51\u7ad9<\/a>\uff0c\u5199\u7684\u6587\u7ae0\uff0c\u5982\u679c\u88ab\u522b\u4eba\u7684\u7f51\u7ad9\u955c\u50cf\u5f15\u7528\u4e86\uff0c\u4f1a\u5f88\u90c1\u95f7\u3002\u524d\u9762\u5206\u4eab\u8fc7\u5b9d\u5854\u548cLNMP\u9632\u76d7\u94fe\u7684\u65b9\u6cd5<\/a>\uff0c\u4e0d\u8fc7\u8fd9\u79cd\u65b9\u6cd5\u5e76\u4e0d\u80fd\u963b\u6b62\u522b\u4ebaiframe\u6846\u67b6\u5f15\u7528\u7684\u7f51\u7ad9\u7684\u5185\u5bb9\u3002<\/p>\n

\u60f3\u8981\u7981\u6b62\u522b\u4eba\u7f51\u7ad9\u901a\u8fc7iframe\u6846\u67b6\u5f15\u7528\u4f60\u7f51\u7ad9\u7684\u5185\u5bb9\uff0c\u8981\u600e\u4e48\u505a\u5462\uff1f\u529e\u6cd5\u5982\u4e0b\uff1a<\/p>\n

\u901a\u8fc7X-Frame-Options\u6765\u9650\u5236\u5176\u4ed6\u7f51\u7ad9\u5f15\u7528<\/h2>\n

The X-Frame-Options HTTP \u54cd\u5e94\u5934\u662f\u7528\u6765\u7ed9\u6d4f\u89c8\u5668\u6307\u793a\u5141\u8bb8\u4e00\u4e2a\u9875\u9762\u53ef\u5426\u5728 <frame>, <iframe>, <embed> \u6216\u8005 <object> \u4e2d\u5c55\u73b0\u7684\u6807\u8bb0\u3002\u7ad9\u70b9\u53ef\u4ee5\u901a\u8fc7\u786e\u4fdd\u7f51\u7ad9\u6ca1\u6709\u88ab\u5d4c\u5165\u5230\u522b\u4eba\u7684\u7ad9\u70b9\u91cc\u9762\uff0c\u4ece\u800c\u907f\u514d clickjacking \u653b\u51fb\u3002<\/p>\n

X-Frame-Options \u6709\u4e0b\u9762\u8fd93\u4e2a\u503c\u53ef\u4ee5\u4f7f\u7528<\/strong>\uff1a<\/p>\n

X-Frame-Options: deny<\/strong> \/\/\u7981\u6b62\u6240\u6709\u57df\u540d\u6846\u67b6\u5f15\u7528<\/p>\n

X-Frame-Options: sameorigin<\/strong> \/\/\u53ea\u6709\u540c\u57df\u540d\u53ef\u4ee5\u5f15\u7528<\/p>\n

X-Frame-Options: allow-from<\/strong> https:\/\/example.com\/ \/\/\u53ea\u6709\u6307\u5b9a\u57df\u540d\u53ef\u4ee5\u5f15\u7528<\/p>\n

\u901a\u5e38\u60c5\u51b5\u6765\u8bf4\u6211\u4eec\u53ea\u9700\u8981\u6dfb\u52a0X-Frame-Options: sameorigin\u5c31\u53ef\u4ee5\u89e3\u51b3\u4e86\u3002<\/p>\n

nginx\u548c\u5b9d\u5854\u9762\u677f\u5b9e\u73b0\u65b9\u6cd5<\/h2>\n

\u5982\u679c\u4f60\u7684\u670d\u52a1\u5668\u4f7f\u7528\u7684\u662fnginx\u6216\u8005\u5b9d\u5854\u9762\u677f\uff0c\u53ef\u4ee5\u901a\u8fc7\u4e0b\u9762\u7684\u65b9\u6cd5\u6765\u5b9e\u73b0X-Frame-Options: sameorigin\u7684\u6dfb\u52a0\u3002<\/p>\n

\u5728\u4f60\u865a\u62df\u4e3b\u673a\u7684ningx\u7684\u914d\u7f6e\u6587\u4ef6\u91cc\u9762\uff0c\u6dfb\u52a0\u4e0a\u4e0b\u9762\u8fd9\u4e32\u4ee3\u7801\uff08\u5b9d\u5854\u7528\u6237\u7684\u64cd\u4f5c\u8def\u5f84\u662f\uff1a\u7f51\u7ad9-\u8bbe\u7f6e-\u914d\u7f6e\u6587\u4ef6\uff09<\/p>\n

add_header X-Frame-Options SAMEORIGIN always;<\/pre>\n
\u4ee3\u7801\u6dfb\u52a0\u5230root\u90a3\u4e00\u4e32\u5185\u5bb9\u7684\u4e0a\u9762\u4e00\u6392\uff0c\u5982\u4e0b\uff1a<\/p>\n
listen 80;\r\nlisten 443 ssl http2;\r\nserver_name blog.naibabiji.com;\r\nindex index.html index.htm default.html default.htm index.php default.php;\r\nadd_header X-Frame-Options SAMEORIGIN always;\r\nroot \/www\/wwwroot\/blog.naibabiji.com;<\/pre>\n
\u6dfb\u52a0\u5b8c\u6bd5\u540e\u91cd\u542fningx\u670d\u52a1\uff0c\u5c31\u53ef\u4ee5\u770b\u5230\u6548\u679c\u4e86\u3002<\/p>\n
LNMP\u4e00\u952e\u5305\u91cd\u542fnginx\u7684\u547d\u4ee4\u662f\uff1a\/etc\/init.d\/nginx restart<\/p>\n
\u5b9d\u5854\u91cd\u542fnginx\u7684\u8def\u5f84\u662f\uff1a\u5e94\u7528\u5546\u5e97-\u641c\u7d22nginx-\u70b9\u51fbnginx-\u91cd\u542f<\/p>\n
\u5176\u4ed6\u8bbe\u7f6e\u65b9\u6cd5<\/h2>\n
\u5982\u679c\u4f60\u4e0d\u662f\u4f7f\u7528\u7684nginx\u670d\u52a1\uff0c\u90a3\u4e48\u8bf7\u67e5\u770b\u4e0b\u9762\u6587\u7ae0\u7684\u4ecb\u7ecd\u8ddf\u7740\u64cd\u4f5c\u5373\u53ef\u3002<\/p>\n
https:\/\/developer.mozilla.org\/zh-CN\/docs\/Web\/HTTP\/X-Frame-Options<\/a><\/p>\n
\u4ee5\u4e0a\u5185\u5bb9\u5c31\u662f\u6559\u5927\u5bb6\u5982\u4f55\u5e94\u4ed8\u5efa\u7f51\u7ad9\u8fc7\u7a0b\u4e2d\u78b0\u5230\u7f51\u7ad9\u88ab\u4eba\u6846\u67b6\u5f15\u7528\u7684\u89e3\u51b3\u529e\u6cd5\uff0c\u5982\u679c\u6709\u5176\u4ed6\u95ee\u9898\u6b22\u8fce\u7559\u8a00\u8ba8\u8bba\u3002<\/p>\n\n\n
\n            \n
\n    \n
\n            
\n            \n\n
<\/div>\n        <\/div>\n            
\n            \n\n
<\/div>\n        <\/div>\n            
\n            \n\n
<\/div>\n        <\/div>\n            
\n            \n\n
<\/div>\n        <\/div>\n            
\n            \n\n
<\/div>\n        <\/div>\n    <\/div>\n    \n
\n            
\n            \n\n
<\/div>\n        <\/div>\n            
\n            \n\n
<\/div>\n        <\/div>\n            
\n            \n\n
<\/div>\n        <\/div>\n            
\n            \n\n
<\/div>\n        <\/div>\n            
\n            \n\n
<\/div>\n        <\/div>\n    <\/div>\n<\/div>\n                \n\n
\n            5\/5 - (1 vote)    <\/div>\n    <\/div>\n","protected":false},"excerpt":{"rendered":"
\u81ea\u5df1\u8f9b\u8f9b\u82e6\u82e6\u5efa\u7684\u7f51\u7ad9\uff0c\u5199\u7684\u6587\u7ae0\uff0c\u5982\u679c\u88ab\u522b\u4eba\u7684\u7f51\u7ad9\u955c\u50cf\u5f15\u7528\u4e86\uff0c\u4f1a\u5f88\u90c1\u95f7\u3002\u524d\u9762\u5206\u4eab\u8fc7\u5b9d\u5854\u548cLNMP\u9632\u76d7\u94fe\u7684\u65b9\u6cd5\uff0c\u4e0d […]<\/p>\n","protected":false},"author":1,"featured_media":2519,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"slim_seo":{"title":"\u7f51\u7ad9\u9632\u6b62\u88ab\u5176\u4ed6\u7ad9iframe\u6846\u67b6\u5f15\u7528\u955c\u50cf\u7684\u65b9\u6cd5 - \u5976\u7238\u5efa\u7ad9\u7b14\u8bb0","description":"\u81ea\u5df1\u8f9b\u8f9b\u82e6\u82e6 \u5efa\u7684\u7f51\u7ad9 \uff0c\u5199\u7684\u6587\u7ae0\uff0c\u5982\u679c\u88ab\u522b\u4eba\u7684\u7f51\u7ad9\u955c\u50cf\u5f15\u7528\u4e86\uff0c\u4f1a\u5f88\u90c1\u95f7\u3002\u524d\u9762\u5206\u4eab\u8fc7 \u5b9d\u5854\u548cLNMP\u9632\u76d7\u94fe\u7684\u65b9\u6cd5 \uff0c\u4e0d\u8fc7\u8fd9\u79cd\u65b9\u6cd5\u5e76\u4e0d\u80fd\u963b\u6b62\u522b\u4ebaiframe\u6846\u67b6\u5f15\u7528\u7684\u7f51\u7ad9\u7684\u5185\u5bb9\u3002 \u60f3\u8981\u7981\u6b62\u522b\u4eba\u7f51\u7ad9\u901a\u8fc7iframe\u6846\u67b6\u5f15\u7528\u4f60\u7f51\u7ad9\u7684\u5185\u5bb9\uff0c\u8981\u600e\u4e48\u505a\u5462\uff1f\u529e\u6cd5\u5982\u4e0b\uff1a \u901a\u8fc7X-Frame-Options\u6765\u9650\u5236\u5176\u4ed6\u7f51\u7ad9\u5f15\u7528 The X"},"footnotes":""},"categories":[142],"tags":[],"class_list":["post-2518","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-skill"],"_links":{"self":[{"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/posts\/2518","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/comments?post=2518"}],"version-history":[{"count":0,"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/posts\/2518\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/media\/2519"}],"wp:attachment":[{"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/media?parent=2518"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/categories?post=2518"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/tags?post=2518"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}