In a config.xmlserver configuration file, the <HttpProtocol> element contains configuration properties for HTTP headers. This element contains <Headers> and <Header> elements.
Example
<HttpProtocol> <Headers> <Headername="X-Frame-Options"value="SAMEORIGIN"description="Protects against Clickjacking attacks."/> <Headername="X-XSS-Protection"value="1; mode=block"description="Protects against XSS injections"/>