Add easily configured security headers to responses including Content-Security-Policy(CSP) which helps detect/prevent XSS and mixed-contents x-frame-options, strict-transport-security, etc.