header('X-Frame-Options:SAMEORIGIN');
header("Strict-Transport-Security: max-age=31536000; includeSubDomains");
header("Referrer-Policy: no-referrer");
header("Content-Security-Policy: object-src 'self'");
header("X-Permitted-Cross-Domain-Policies: master-only");
header('X-XSS-Protection:1; mode=block');
header('X-Download-Options: noopen');
header('X-Content-Type-Options: nosniff');
add_header X-Frame-Options SAMEORIGIN;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
add_header Referrer-Policy "no-referrer";
add_header Content-Security-Policy "object-src self";
add_header X-Permitted-Cross-Domain-Policies "master-only";
add_header X-XSS-Protection "1; mode=block";
add_header X-Download-Options noopen;
add_header X-Content-Type-Options nosniff;