@JsonCreator
        public static HttpSecurityBean.XssProtection fromValue(String value) {
            HttpSecurityBean.XssProtection constant = constants.get(value);
            if (constant == null) {
                throw new IllegalArgumentException(value);
            } else {
                return constant;
            }
        }
Content Type Options
<p>
X-Content-Type-Options: Prevent MIME-sniffing to any type other than the declared Content-Type.

@param contentTypeOptions The contentTypeOptions
plugins/http-security-policy/src/main/java/io/apiman/plugins/httpsecuritypolicy/beans/HttpSecurityBean.java