发现

 WEB容器开启、关闭OPTIONS方法 Safe

请求包随意,响应包信息如下:

SRE实战 互联网时代守护先锋,助力企业售后服务体系运筹帷幄!一键直达领取阿里云限量特价优惠。
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Fri, 17 Apr 2020 03:09:15 GMT
Connection: close
Content-Length: 43251

<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
    ...

特征:

# 响应头有这4个字段
Server: Microsoft-IIS/7.5
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET

关闭options方案

关闭options得根据服务器使用的WEB容器种类来决定方法,下面列举主流的。

扫码关注我们
微信号:SRE实战
拒绝背锅 运筹帷幄