webfrontend.properties 

# It is possible add http response headers to each http response send to the client.
# This applies for all http resources below /pim context.
# Use prefix 'web.client.headers.response.' to add arbitrary number of http response header.
# The following sample adds the header 'Strict-Transport-Security' with value 'max-age=31536000; includeSubDomains' to each response.
# web.client.headers.response.Strict-Transport-Security = max-age=31536000; includeSubDomains