Header always set X-Content-Type-Options nosniff
Header always set X-XSS-Protection "1; mode=block"
# Header always set Access-Control-Allow-Origin: "*"
Header always set X-Content-Type-Options nosniff
Header always set X-XSS-Protection "1; mode=block"
# Header always set Access-Control-Allow-Origin: "*"