Path: API › 网站管理

`POST /site`

获取指定网站的 HTTP 安全响应头配置状态。

## Request body

_Required._

- `request_time` (`action289.request_time`; string, required) — Unix 时间戳。
- `request_token` (`action289.request_token`; string, required) — 按 API 概览生成的签名。
- `action` (`action289.action`; string, required) — 具体操作名称。
  - one of `"get_security_headers"`
- `site_name` (`action289.site_name`; string, required) — 网站域名

## Example request

```text
{
  "request_time": "string",
  "request_token": "string",
  "action": "get_security_headers",
  "site_name": "string"
}
```

## Code samples

### cURL（填写面板地址与签名）

```bash
curl --request POST \
  --url "https://your-panel.example.com:8888/site" \
  --header "Content-Type: application/x-www-form-urlencoded" \
  --data-urlencode "request_time=<Unix时间戳>" \
  --data-urlencode "request_token=<按 API 概览生成的签名>" \
  --data-urlencode "action=get_security_headers" \
  --data-urlencode "site_name=<site_name>"
```

## Responses

### default

接口响应，业务状态见下方详细说明。

#### Example

```json
{
  "x_xss_protection": false,
  "x_content_type_options": false,
  "referrer_policy": false,
  "content_security_policy": false,
  "permissions_policy": false
}
```

- `x_xss_protection` (`action289.response.default.x_xss_protection`; boolean, optional) — XSS 保护开关
- `x_content_type_options` (`action289.response.default.x_content_type_options`; boolean, optional) — Content-Type 选项
- `referrer_policy` (`action289.response.default.referrer_policy`; boolean, optional) — Referrer 策略
- `content_security_policy` (`action289.response.default.content_security_policy`; boolean, optional) — CSP 策略
- `permissions_policy` (`action289.response.default.permissions_policy`; boolean, optional) — 权限策略


## get_security_headers

获取指定网站的 HTTP 安全响应头配置状态。

- **路由**：`POST /site`
- **action**：`get_security_headers`

## 输入参数

| 参数名称 | 必选 | 类型 | 描述 |
|----------|------|------|------|
| action | 是 | String | 固定值 `get_security_headers` |
| site_name | 是 | String | 网站域名 |

## 输出参数

| 参数名称 | 类型 | 描述 |
|----------|------|------|
| x_xss_protection | Boolean | XSS 保护开关 |
| x_content_type_options | Boolean | Content-Type 选项 |
| referrer_policy | Boolean | Referrer 策略 |
| content_security_policy | Boolean | CSP 策略 |
| permissions_policy | Boolean | 权限策略 |

## 示例

### 请求

```
POST /site HTTP/1.1
Host: 192.168.168.213:8888
Content-Type: application/x-www-form-urlencoded

action=get_security_headers&site_name=testapi.bt.local
```

### 响应

```json
{"x_xss_protection": false, "x_content_type_options": false, "referrer_policy": false, "content_security_policy": false, "permissions_policy": false}
```