Andreas Auernhammer f60765ac93 add some security HTTP headers (#5814) ... This change adds some security headers like Content-Security-Policy. It does not set the HSTS header because Content-Security-Policy prevents mixed HTTP and HTTPS content and the server does not use cookies. However it is a header which could be added later on. It also moves some header added by #5805 from a vendored file to a generic handler. Fixes ##5813		2018-04-12 15:57:41 -07:00
..
context
handlers
mux
rpc