STRICT-TRANSPORT-SECURITY
Ensures HTTPS-only access.
PERMISSIONS-POLICY
Restricts feature access.
X-FRAME-OPTIONS
Prevents clickjacking.
CONTENT-SECURITY-POLICY
Protects from XSS.
X-CONTENT-TYPE-OPTIONS
Prevents MIME-type sniffing.
X-XSS-PROTECTION
Blocks XSS attacks.
REFERRER-POLICY
Controls Referer header.
X-PERMITTED-CROSS-DOMAIN-POLICIES
Manages cross-domain requests.