more_set_headers "X-XSS-Protection: {{ X_XSS_PROTECTION }}";