What are the security implications of this header?