Page History

...

Here are some documentation and links for each header:

Global references

https://blog.appcanary.com/2017/http-security-headers.html

...

OFBiz users can decide to change this parameter if they want 

Public-Key-Pins-Report-Only

To use in custom project only. Public-Key-Pins-Report-Only is interesting but can't be used OOTB because of demos (the letsencrypt certificate is renewed every 3 months)

Related Jira issues:

...