Security headers

HTTP response headers such as HSTS, Content-Security-Policy and X-Frame-Options that instruct the browser to refuse classes of attack.