Upgrade Insecure Requests X-XSS protection X-Content Type Options Referrer-Policy X-Frame-Options Permissions-Policy