[prodigal_erik]

I'm not very familiar with X-Frame-Options and X-XSS-Protection headers. Do they actually do anything for errors or empty responses, or does this stack just add them by default?