C#中通过Response.Headers设置自定义参数的代码示例

// ASP.NET Core方案
Response.Headers.Append("X-API-Version", "2.3.1");
Response.Headers.Append("Custom-Auth-Token", Guid.NewGuid().ToString());

var customHeaders = new Dictionary<string, StringValues> {
    ["X-Request-ID"] = "9f3b4d7a-1e5f-4c8d",
    ["X-Cache-Hit"] = "false"
};
Response.Headers.AddRange(customHeaders);

if (!HeaderNames.IsValidHeaderName(headerName)) 
{
    throw new ArgumentException("非法头名称");
}

if (HeaderNames.IsRestrictedHeader(headerName)) 
{
    _logger.LogWarning($"尝试设置受限头: {headerName}");
    return;
}

public static class CustomHeaders 
{
    public static readonly string ApiTraceId = "X-Trace-ID";
    public static readonly string ApiRateLimit = "X-RateLimit-Limit";
}

// 使用示例
Response.Headers.Append(CustomHeaders.ApiTraceId, Activity.Current?.Id);

app.Use(async (context, next) =>
{
    context.Response.Headers.Append("X-Edge-Node", Environment.MachineName);
    await next();
});

[HttpGet("data")]
public IActionResult GetData()
{
    var auditTag = $"audit_{DateTime.UtcNow:yyyyMMdd}";
    Response.Headers.Append("X-Audit-Tag", auditTag);
    
    return Ok(data);
}

Response.Headers.Append("Set-Cookie", 
    new StringValues(new[] { "session=abc123; Path=/", "lang=zh-CN; Path=/" }));

var encodedValue = Uri.EscapeDataString("value; with/special=chars");
Response.Headers.Append("X-Encoded-Header", encodedValue);

[Fact]
public void Test_CustomHeader_Injection()
{
    var controller = new TestController();
    var result = controller.GetData() as OkResult;
    
    Assert.True(result.HttpContext.Response.Headers.ContainsKey("X-Audit-Tag"));
}