How to set referrer-policy and x-xss-protection

Hi Andrea,

your plugin is very interesting and would let me to avoid server-side configurations.

My only difficulty is how to integrate x-xss-protection and referrer-policy. I’ve read that it is possible, but how?

My goal is to set referrer-policy as strict-orogin-when-cross-origin and x-xss-protection as 1; mode=block.

Thanks