From d7c7208e3720d72dadec01ee997c350096ab6b15 Mon Sep 17 00:00:00 2001
From: yanjinhui <3306209981@qq.com>
Date: 星期五, 14 十一月 2025 14:33:59 +0800
Subject: [PATCH] 11
---
项目代码/后端/后台管理/WIDESEAWCS_Server/WIDESEAWCS_Server/Program.cs | 95 +++++++++++++++++++++++++++++++++++++++++++++--
1 files changed, 90 insertions(+), 5 deletions(-)
diff --git "a/\351\241\271\347\233\256\344\273\243\347\240\201/\345\220\216\347\253\257/\345\220\216\345\217\260\347\256\241\347\220\206/WIDESEAWCS_Server/WIDESEAWCS_Server/Program.cs" "b/\351\241\271\347\233\256\344\273\243\347\240\201/\345\220\216\347\253\257/\345\220\216\345\217\260\347\256\241\347\220\206/WIDESEAWCS_Server/WIDESEAWCS_Server/Program.cs"
index 65e497b..722d71d 100644
--- "a/\351\241\271\347\233\256\344\273\243\347\240\201/\345\220\216\347\253\257/\345\220\216\345\217\260\347\256\241\347\220\206/WIDESEAWCS_Server/WIDESEAWCS_Server/Program.cs"
+++ "b/\351\241\271\347\233\256\344\273\243\347\240\201/\345\220\216\347\253\257/\345\220\216\345\217\260\347\256\241\347\220\206/WIDESEAWCS_Server/WIDESEAWCS_Server/Program.cs"
@@ -46,7 +46,7 @@
builder.Services.AddAllOptionRegister();//锟斤拷取锟斤拷锟斤拷锟侥硷拷
builder.Services.AddMemoryCacheSetup();//锟斤拷锟斤拷
builder.Services.AddSqlsugarSetup();//SqlSugar 锟斤拷锟斤拷锟斤拷锟斤拷
-//builder.Services.AddInitializationHostServiceSetup();//应锟矫筹拷始锟斤拷锟斤拷锟斤拷注锟斤拷
+//builder.Services.AddInitializationHostServiceSetup();//鍒涘缓鏁版嵁搴撶殑鏃跺�欐墦寮�
builder.Services.AddHostedService<SeedDataHostedService>();
builder.Services.AddDbSetup();//Db 锟斤拷锟斤拷锟斤拷锟斤拷
@@ -89,7 +89,7 @@
builder.Services.AddControllers(o =>
{
- o.Filters.Add(typeof(GlobalExceptionsFilter));//全锟斤拷锟届常
+ o.Filters.Add(typeof(GlobalExceptionsFilter));
})
.AddNewtonsoftJson(options =>
{
@@ -107,6 +107,11 @@
builder.Services.Replace(ServiceDescriptor.Transient<IControllerActivator, ServiceBasedControllerActivator>());
Encoding.RegisterProvider(CodePagesEncodingProvider.Instance);
+//瑙ｅ喅鏈嶅姟鍣ㄥ湪HTTP鍝嶅簲涓嚜鍔ㄦ坊鍔犱簡涓�浜涗笉蹇呰鐨勬爣澶�
+//builder.WebHost.ConfigureKestrel(serverOptions =>
+//{
+// serverOptions.AddServerHeader = false;
+//});
var app = builder.Build();
@@ -118,12 +123,92 @@
app.UseAllServicesMiddle(builder.Services);
//FaceAI.Face.sdk_init(null);//浜鸿劯璇嗗埆
app.UseSession();
-//if (app.Environment.IsDevelopment())
+if (app.Environment.IsDevelopment())
{
//todo
app.UseSwaggerAuthorized();
- app.UseSwaggerMiddle(() => Assembly.GetExecutingAssembly().GetManifestResourceStream("WIDESEAWCS_Server.index.html") ?? throw new Exception("未锟揭碉拷WIDESEAWCS_Server.index.html锟侥硷拷"));
-}//锟叫讹拷锟角凤拷锟斤拷要锟斤拷swagger
+ app.UseSwaggerMiddle(() => Assembly.GetExecutingAssembly().GetManifestResourceStream("WIDESEAWCS_Server.index.html") ?? throw new Exception("鏈壘鍒癢IDESEAWCS_Server.index.html鏂囦欢"));
+}////鍒ゆ柇鏄惁闇�瑕佹墦寮�swagger
+
+
+//X-Content-Type-Options鈥濆ご缂哄け鎴栦笉瀹夊叏
+// 浣跨敤 AddDefaultSecurityHeaders 鏂规硶娣诲姞涓�缁勬帹鑽愮殑瀹夊叏鏍囧ご
+//app.UseSecurityHeaders(policies => policies
+// .AddFrameOptionsDeny() // 娣诲姞 X-Frame-Options: DENY
+// .AddContentTypeOptionsNoSniff() // 杩欏氨鏄綘闇�瑕佺殑 X-Content-Type-Options: nosniff
+// .AddXssProtectionBlock() // 娣诲姞 X-XSS-Protection: 1; mode=block
+// .AddStrictTransportSecurityMaxAgeIncludeSubDomains(maxAgeInSeconds: 60 * 60 * 24 * 365) // 娣诲姞 HSTS 澶�
+// // 绉婚櫎鏈嶅姟鍣ㄤ俊鎭ご
+// //.AddCustomHeader("X-Powered-By", string.Empty) // 娉ㄦ剰鏄� AddCustomHeader
+// //瑙ｅ喅Content-Security-Policy缂哄け
+// .AddContentSecurityPolicy(builder =>
+// {
+// builder.AddDefaultSrc().Self();
+// builder.AddScriptSrc().Self();
+// builder.AddStyleSrc().Self();
+// builder.AddImgSrc().Self().Data();
+// builder.AddFontSrc().Self();
+// })
+
+//);
+// 鎵嬪姩绉婚櫎澶氫綑鍝嶅簲澶达紙鏃х増鍖呭繀椤伙級
+app.Use(async (context, next) =>
+{
+ context.Response.Headers.Remove("Server");
+ context.Response.Headers.Remove("X-Powered-By");
+ context.Response.Headers.Remove("x-miniprofiler-ids"); // MiniProfiler 鐨勬寚鏍囧ご
+ await next();
+});
+// 鎷︽埅鏁忔劅璺緞锛岃繑鍥� 404
+//app.Use(async (context, next) =>
+//{
+// var path = context.Request.Path.Value ?? string.Empty;
+
+// var blacklist = new[]
+// {
+// "/.git", "/.svn", "/.env", "/backup", "/backups", "/config", "/database", "/.idea", "/.vscode", "/node_modules"
+// };
+
+// if (path.Contains("..") || blacklist.Any(b => path.StartsWith(b, StringComparison.OrdinalIgnoreCase)))
+// {
+// context.Response.StatusCode = StatusCodes.Status404NotFound;
+// await context.Response.WriteAsync("Not Found");
+// return;
+// }
+// await next();
+//});
+//搴旂敤绋嬪簭鎸囨爣鏁版嵁鏆撮湶
+//app.Use(async (context, next) =>
+//{
+// var path = context.Request.Path.Value ?? string.Empty;
+// // 闇�瑕佷繚鎶ょ殑绔偣鍓嶇紑
+// var sensitivePrefixes = new[]
+// {
+// "/metrics", "/health", "/actuator", "/diagnostics", "/debug", "/metrics/prometheus"
+// };
+
+// if (sensitivePrefixes.Any(p => path.StartsWith(p, StringComparison.OrdinalIgnoreCase)))
+// {
+// var secret = app.Configuration["Internal:MetricsKey"]; // 鍦� appsettings.json 鎴� 鐜鍙橀噺閲岄厤缃�
+// if (string.IsNullOrWhiteSpace(secret))
+// {
+// // 鏈厤缃瘑閽ワ細涓轰簡瀹夊叏鎷掔粷璁块棶
+// context.Response.StatusCode = StatusCodes.Status403Forbidden;
+// await context.Response.WriteAsync("Forbidden");
+// return;
+// }
+
+// if (!context.Request.Headers.TryGetValue("X-Internal-Secret", out var provided) || provided != secret)
+// {
+// context.Response.StatusCode = StatusCodes.Status401Unauthorized;
+// await context.Response.WriteAsync("Unauthorized");
+// return;
+// }
+// }
+
+// await next();
+//});
+app.UseHttpsRedirection();
app.UseIpLimitMiddle();
app.UseApiLogMiddleware();
--
Gitblit v1.9.3