Apache Security header
LoadModule headers_module modules/mod_headers.so
<IfModule mod_headers.c> Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
Header always append X-Frame-Options SAMEORIGIN
Header always set X-Content-Type-Options nosniff
Header always set X-XSS-Protection "1; mode=block"
</IfModule>