Source: https://owasp.org/www-chapter-ghana/assets/slides/HTTP_Header_Security.pdf