Refused to set unsafe header "cookie"

w3c规定，当请求的header匹配以下不安全字符时，将被终止，具体参考如下：

Accept-Charset
Accept-Encoding
Connection
Content-Length
Cookie
Cookie2
Content-Transfer-Encoding
Date
Expect
Host
Keep-Alive
Referer
TE
Trailer
Transfer-Encoding
Upgrade
User-Agent
Via

来源链接：www.codeleading.com/article/656…