https://jira.deutsche-digitale-bibliothek.de/browse/DDBNEXT-1373: Enable XSS aware security headers
allow access to DDB map server
avoid inline CSS style
simplified code
set header "X-XSS-Protection"
Merge remote-tracking branch 'origin/DDBNEXT-1373' into develop