什么是x-Application-Context标头?

时间:2016-11-02 12:05:44

标签: security web spring-boot owasp

这个响应头(x-Application-Context)代表什么?它是否特定于Spring框架?

以下标题的含义是什么?

X-Application-Context   airtel-project-service:aws:27094

是否会显示主机名或端口号等敏感信息?

1 个答案:

答案 0 :(得分:25)

Spring Boot ApplicationContextHeaderFilter会添加此标头。 课程描述:

  

OncePerRequestFilter添加包含ApplicationContext ID的X-Application-Context头。

AppliationContext ID是此上下文所属的已部署应用程序的名称。

您可以通过将false属性设置为management.add-application-context-header=true # Add the "X-Application-Context" HTTP header in each response. 来更改默认行为。

 #include <GUIConstantsEx.au3>
 #include <mssql.au3>
 #include <MsgBoxConstants.au3>
 #include <Array.au3>
 #include <WindowsConstants.au3>
 global $title = "E-Mail address lookup"
 global $sqlCon = _MSSQL_Con("server", "user", "Directory3=", "password")
 global $name = InputBox($title,"Please type the name of the person you wish to find")
 global $result = _MSSQL_GetRecord($sqlCon, "autoit_view","*", "WHERE cn LIKE '%" & StringStripWS($name,3) & "%'")
 if StringLen(StringStripWS($name,3)) < 1 then
      MsgBox(0, $title, "Name cannot be empty")
 Else
 Global $ControlID = GUICreate($title, 530, 500)
 GUISetState(@SW_SHOW)
 Local $iOldOpt = Opt("GUICoordMode", 2)
 GUICtrlCreateLabel("  ", 0, 0, 80)
 GUICtrlCreateLabel("E-Mail Address", 20, -1, 100)
 GUICtrlCreateLabel("Name", 20, -1, 50)
 GUICtrlCreateLabel("Department", 20, -1, 100)
 GUICtrlCreateLabel("Telephone Number", 20, -1, 200)
 for $i = 1 To UBound($result) Step 1
      GUICtrlCreateButton("Copy", 0, $i, 30, 20)
 Next
 GUISetState()

 While 1
      Global $Msg = GUIGetMsg()
      Switch $Msg
           Case -3, $ControlID
        Exit
      EndSwitch
 WEnd
EndIf

Spring Boot resolved issue 1308