{
  "headers": [
    {
      "source" : "**/*",
      "headers" : [{
        "key" : "X-Frame-Options",
        "value" : "DENY"
      },{
        "key" : "Strict-Transport-Security",
        "value" : "max-age=63072000; includeSubDomains; preload"
      }]
    }
  ]
}