Enabling Security Headers
Security headers are responses set by the WAF that communicate to browsers rules about what behaviors are allowed.
X-XSS-Protection
Helps to prevent cross-site scripting attacks by restricting certain browser behaviors.
X-Frame-Options
Prevents your site from loading iframes, which are sometimes used in phishing attempts.
X-Content-Type-Options
Prevents MIME-based content attacks.