this is an extension all about defenses against XSS and Clickjacking.