dotnet package add Install-Package NetEscapades.AspNetCore.SecurityHeaders
public void Configure(IApplicationBuilder app) { app.UseSecurityHeaders(); // other middleware e.g. static files, MVC etc }
References
https://github.com/andrewlock/NetEscapades.AspNetCore.SecurityHeaders