Header set X-Clacks-Overhead "GNU Terry Pratchett" Header always set X-Content-Type-Options "nosniff" Header always set X-Frame-Options "sameorigin" Header always set Referrer-Policy "no-referrer" # Header always set X-Xss-Protection "1; mode=block" Header always set X-Xss-Protection "1"