Upgrade Insecure Requests X-XSS protection X-Content Type Options Referrer-Policy Expect-CT X-Frame-Options Permissions-Policy HTTP Strict Transport Security