打开response-transformer插件:
Add.Headers: 一条一条加
------------------------------------
Referrer-Policy:no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies:master-only
X-Frame-Options:SAMEORIGIN
X-Download-Options:noopen
X-XSS-Protection:1; mode=block
Strict-Transport-Security:max-age=31536000; includeSubdomains; preload
Content-Security-Policy:connect-src *
Cache-Control:no-cache
Set-Cookie:Path=/; Secure; HttpOnly; SameSite=Strict
more_clear_headers:Server Allow
X-Content-Type-Options:nosniff #这个头如果后端返回不正确加不上
Remove.Headers 可以隐藏后端的头信息
server
allow
server头关闭显示方法
在docker yaml环境变量中添加：
KONG_HEADERS=off
