@Saiwal That was easier than I feared. Seems to fix the issue.

Now, to analyze if those headers are secure or not...