Adding HSTS
# Really Simple SSL
Header always set Strict-Transport-Security: "max-age=31536000" env=HTTPS
# End Really Simple SSL
#To remove HSTS. Keep the line, but set max-age to zero. Or "max-age=0"Adding X-XSS-Protection
# Really Simple SSL
Header always set X-XSS-Protection "0"
# End Really Simple SSLAdding X-Content-Type-Options
# Really Simple SSL
Header always set X-Content-Type-Options "nosniff"
# End Really Simple SSLAdding Referrer-Policy header
# Really Simple SSL
Header always set Referrer-Policy "strict-origin-when-cross-origin"
# End Really Simple SSLAdding X-Frame-Options header
# Really Simple SSL
Header always set X-Frame-Options: "SAMEORIGIN"
# End Really Simple SSLAdding Permissions-Policy header
# Really Simple SSL
Header always set Permissions-Policy: ""
# End Really Simple SSL