x-xss-protection header for lanetix/ui#122