http security hsts csp sri http:header=strict-transport-security http:header=content-security-policy http:header=x-content-type-options http:header=x-frame-options http:header=referrer-policy wikipedia:en=Cross-site_request_forgery wikipedia:en=Session_hijacking wikipedia:en=Data_breach wikipedia:en=Man-in-the-middle_attack wikipedia:en=Clickjacking

hsts http security chrome firefox