无法使用 python 检索 CSP header

Question

我想从某个站点检索所有 headers，在本例中为“https://www.facebook.com”，如下所示：

import urllib2
enter code here`req = urllib2.Request('https://www.facebook.com/')
res = urllib2.urlopen(req)
print res.info()
res.close();

导致此响应：

X-XSS-Protection: 0
Pragma: no-cache
Cache-Control: private, no-cache, no-store, must-revalidate
X-Frame-Options: DENY
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Set-Cookie: sb=1GyeWkJzGbmX-VUyBi26; expires=Thu, 05-Mar-2020 10:26:28 GMT; Max-Age=63071999; path=/; domain=.facebook.com; secure; httponly
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
X-FB-Debug: X9aSOOKs6/aER1yuY4iUUIZrj4yTKtKSUAZ/AFE37IieCe8O4MSsFc5xlQ0LoQyHnbrSL4DaYiTVUUkFZeDrsqqg==
Date: Tue, 06 Mar 2018 10:26:29 GMT
Connection: close

我可以检索除 Content-Security-Policy 之外的所有 headers (csp)；但是每当我测试 geekflare csp test 它成功检索了所有 headers，包括 csp 一个。

Answer 1

我好像忘了在请求中设置 User-Agent。

无法使用 python 检索 CSP header

Cannot retreive CSP header with python

python

header

http

response

content-security-policy