@Override
    protected void doApply(ApiResponse response, IPolicyContext context, HttpSecurityBean config,
            IPolicyChain<ApiResponse> chain) {

        setSecurityHeaders(config, response.getHeaders());

        chain.doApply(response);
    }
Security-related HTTP headers can be set, such as HSTS, CSP and XSS protection.

@author Marc Savy {@literal <msavy@redhat.com>}
plugins/http-security-policy/src/main/java/io/apiman/plugins/httpsecuritypolicy/HttpSecurityPolicy.java