Added support for X-XSS-Protection header