more_set_headers "X-XSS-Protection: %X_XSS_PROTECTION%";