HTTP header modification

[kevin_lacinski]

Hi

Need to update http headers with some items.  Not sure how/where to do effectively.  Anyone able to assist? I need to add some items and update others like:

Strict-Transport-Security: max-age=31536000; include Subdomains;
Content-Security-Policy: default-src self'; script-src 'self' 'unsafe-inline'
X-Frame-Options: DENY

Thanks!

[Radek Dostál]

Is this a bot? What is this? Can we block it?

[kevin_lacinski]

no its not a bot. why would you think that?  It is a need from a security scan.