These are new default security preferences but they don't change on upgrades in case someone needs lower security.
Permalink: https://tiki.org/blogpost957-Enabled-http_header_public_key_pins-and-http_header_content_security_policy
These are new default security preferences but they don't change on upgrades in case someone needs lower security.