#//header("X-XSS-Protection: 1; mode=block");
#//header("X-Content-Type-Options: nosniff");
#//header("Strict-Transport-Security: max-age=31536000");
#/**
# * @todo: da verificare e implementare
# *
# * header('Public-Key-Pins: pin-sha256="d6qzRu9zOECb90Uez27xWltNsj0e1Md7GkYYkVoZWmM="; pin-sha256="E9CZ9INDbd+2eRQozYqqbQ2yXLVKB9+xcprMF+44U1g="; max-age=604800; includeSubDomains; report-uri="https://example.net/pkp-report"');
# * header("Referrer-Policy: origin-when-cross-origin");
# * header("Expect-CT: max-age=7776000, enforce");
# */