This is a very simple Drupal 8 module that will help secure your website's HTTP headers and improve performance.
This module allows the following HTTP header configurations:
- Content-Security-Policy
- Strict-Transport-Security
- Public-Key-Pins
- Access-Control-Allow-Origin
- X-Xss-Protection
- X-Frame-Options
- X-Content-Type-Options
- Cache-Control
Please install the module and configure it here admin/config/development/http_response_headers.