P3P documentation and references
NoConfidentialCachingMiddleware documentation and reference, add
"private" keyword to the Cache-Control header
CSP documentation and references