On: HTTP Security headers you should be using

[sheraz]

Sorry for brevity as im posting from mobile, but you should have a look at OWASP page on usedul http headers

here:

https://www.owasp.org/index.php/List_of_useful_HTTP_headers