Module security_headers 

The module provides several HTTP security headers support.

Functions

append_headers

It appends security headers like Strict-Transport-Security: max-age=63072000; includeSubDomains; preload (2 years max-age), X-Frame-Options: DENY and Content-Security-Policy: frame-ancestors 'self'.