Enable modern web security headers to all responses

Go from an F to an A grade on securityheaders.io by adding security policy headers to your responses at the edge.

VCL

Use this solution in your VCL service (click RUN below to test this solution or clone it to make changes):