@Override
    public void init(final FilterConfig filterConfig) {
        val initParamNames = filterConfig.getInitParameterNames();
        while (initParamNames.hasMoreElements()) {
            val paramName = initParamNames.nextElement();
            val paramValue = filterConfig.getInitParameter(paramName);
            this.headersMap.put(paramName, paramValue);
        }
    }
Allows users to easily inject the default security headers to assist in protecting the application.
The default for is to include the following headers:
&lt;pre&gt;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
&lt;/pre&gt;

@author Misagh Moayyed
@since 6.1.0
core/cas-server-core-web-api/src/main/java/org/apereo/cas/web/support/filters/AddResponseHeadersFilter.java