Header pragma weg / Restricted sites array / Sanitize strings und
session