PHP Security

#set up response header
<IfModule mod_headers.c>
Header set X-Frame-Options "SAMEORIGIN"
Header set Content-Security-Policy "default-src 'self'"
</IfModule>

https://adamschen9921.pixnet.net/blog/post/116879044-apache%E7%A7%BB%E9%99%A4%E9%87%8D%E8%A6%81%E8%B3%87%E8%A8%8Aheader

https://gist.github.com/phpdave/24d879514e7411047267