Thanks for spotting the other places, as I was aware of only the ContentServlet. Now this PR removes all additions of this header, as CommonHeadersFilter that uses the WebUtils class to add "standard" headers will now apply it to _every_ existing resource.