From f3fc17b3c8e1ee8cce7c760cda1ee416bfa43798 Mon Sep 17 00:00:00 2001
From: liuyong <925339056@qq.com>
Date: Thu, 27 Feb 2025 09:29:38 +0800
Subject: [PATCH 1/2] =?UTF-8?q?fix:=20api-dsapi=20nginx=20=E5=93=8D?=
 =?UTF-8?q?=E5=BA=94=E5=A4=B4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 deploy/nginx/nginx.conf | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/deploy/nginx/nginx.conf b/deploy/nginx/nginx.conf
index ed224ac..95adf6c 100644
--- a/deploy/nginx/nginx.conf
+++ b/deploy/nginx/nginx.conf
@@ -126,7 +126,13 @@ http {
     location /api-dsapi/ {
       limit_req zone=ratelimit burst=2 nodelay;
       proxy_set_header X-Forwarded-For $http_x_real_ip;
-
+      add_header X-XSS-Protection "1; mode=block";
+      add_header X-Frame-Options DENY;
+      add_header X-Content-Type-Options nosniff;
+      add_header Content-Security-Policy "script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'none'; frame-src 'none'; ";
+      add_header Cache-Control "no-cache,no-store,must-revalidate";
+      add_header Pragma no-cache;
+      add_header Expires 0;
       proxy_pass https://dsapi.osinfra.cn/;
     }
 
-- 
Gitee


From 487edea8c02e9f06f7ae169642e9d0c74e64d0c9 Mon Sep 17 00:00:00 2001
From: liuyong <925339056@qq.com>
Date: Fri, 7 Mar 2025 14:26:00 +0800
Subject: [PATCH 2/2] =?UTF-8?q?fix:=20dockerfile=20=E6=95=B4=E6=94=B9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 Dockerfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 1f3a52c..497046c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -87,7 +87,8 @@ RUN touch /var/run/nginx.pid \
     && echo "export TMOUT=1800 readonly TMOUT" >> /etc/profile \
     && rm -rf /usr/bin/gdb* \
     && rm -rf /usr/share/gdb \
-    && rm -rf /usr/share/gcc-10.3.1 \
+    && rm -rf /usr/share/gcc-12 \
+    && rm -rf /usr/lib64/python3.11/pdb.py \
     && yum remove gdb-gdbserver findutils passwd shadow -y
 
 COPY ./deploy/monitor.sh ./deploy/entrypoint.sh /etc/nginx/
-- 
Gitee