Security features add-on

[dutch2005]

I would like for NPM, to have the following features available by-design (or selectable)

X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff

https://github.com/GetPageSpeed/ngx_security_headers

Possibly including with the following settings:

https://github.com/AirisX/nginx_cookie_flag_module

You''ll have a much more secure site once you implement those (and have these options "generaly"available for end-users of NPM.

Less hassle with manual config settings and "just" a section/toggle switch.