关于

html 安全Meta

<meta 
  http-equiv="Content-Security-Policy" 
  content="script-src 'self' 'unsafe-eval' 'unsafe-inline' ; 
      object-src xxx.xxx.com ; 
      style-src 'unsafe-inline' xxx.xxx.com; 
      child-src https:"
/>


<script>
        if (top.location != self.location) {top.location=self.location;}
</script>