+
+ Header always setifempty X-Content-Type-Options "nosniff"
+ Header always setifempty X-Frame-Options "sameorigin"
+ Header always setifempty Referrer-Policy "no-referrer"
+ # Header always setifempty X-Xss-Protection "1; mode=block"
+ Header always setifempty X-Xss-Protection "1"