Add support for X-XSS-Protection header.