[TOC] # 漏洞詳情  # 漏洞處理方案 掃描工具給出的漏洞處理的方案  ingress-nginx處理方案 >[danger] 注意：proxy_set_header是nginx設置請求頭給上游服務器，add_header是nginx設置響應頭信息給瀏覽器。 ```shell # 備份ingress-nginx配置文件 kubectl get configmap/nginx-configuration-nginx-ingress-controller -n kube-system -oyaml > nginx-configuration.yaml # 添加add-headers參數，如果已經存在則不需要指定。 kubectl patch configmap/nginx-configuration-nginx-ingress-controller -n kube-system --type merge -p '{"data":{ "add-headers": "kube-system/custom-add-headers"}}' # 創建add-headers的configmap配置 cat << EOF | kubectl apply -f - apiVersion: v1 data: Content-Security-Policy: "default-src 'self'" X-Content-Type-Options: "nosniff" X-XSS-Protection: "1; mode=block" Set-Cookie: "HttpOnly" Set-Cookie: "Secure" kind: ConfigMap metadata: name: custom-add-headers namespace: kube-system EOF ``` # 參考文檔 ingress-nginx文檔：https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#add-headers