This module allows headers to be added, updated or removed through configuration with a particular focus on security and performance headers.
By default the following HTTP header configurations are set:
- Content-Security-Policy
- Strict-Transport-Security
- Public-Key-Pins
- Access-Control-Allow-Origin
- X-Xss-Protection
- X-Frame-Options
- X-Content-Type-Options
Please install the module and configure it here /admin/config/system/response-headers.