code: public static void setDefaultSecurityHeaders(final WebResponse response)
  	{
  		// Category: Framing
  		WicketComponentExtensions.setSecurityFramingHeaders(response);
  		// Category: Transport
  		WicketComponentExtensions.setSecurityTransportHeaders(response);
  		// Category: XSS
  		WicketComponentExtensions.setSecurityXSSHeaders(response);
  		// Category: Caching
  		WicketComponentExtensions.setSecurityCachingHeaders(response);
  	}
docs: Sets the security headers. You can check your setting on on the link below.
  
  @see <a href="http://cyh.herokuapp.com/cyh">check headers</a>
  
  @param response
  the new security headers