X-XSS-Protection content http-Strict-Transport-Security Content-Security-Policy Content-Type X-Frame-Options X-XSS-Protection