https://techbear.ru/http-security-headers/