X-Xss-Protect just check if it's not None