页面eastpump.com检测结果
Server: Microsoft-IIS/10.0
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Permissions-Policy: geolocation=()
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: master-only
Date: Thu, 12 Sep 2024 20:03:12 GMT
Access-Control-Allow-Headers: Origin,Host,Content-Type,x-requested-with,X-Custom-Header,requesttype
Referrer-Policy: strict-origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
Cache-Control: public,no-transform
Access-Control-Allow-Credentials: true
X-Xss-Protection: 1;mode=block
Content-Security-Policy: Default-src 'self' 'unsafe-inline' 'unsafe-eval' *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *;connect-src 'self' 'unsafe-inline' 'unsafe-eval' *;img-src 'self' 'unsafe-inline' 'unsafe-eval' * blob: data:;frame-src 'self' 'unsafe-inline' 'unsafe-eval' *;style-src 'self' 'unsafe-inline' 'unsafe-eval' *;
Content-Length: 148
X-Powered-By: ASP.NET
Location: https://www.eastpump.com/
Content-Type: text/html; charset=UTF-8