Allow more than three custom HTTP-headers per website Merged

Edit: This is already part of V10

Currently Domino allows you to set exactly three custom headers per website(Web Site Rule Document) plus an additional one via the notes.ini variable HTTPAdditionalRespHeader(which applies server-wide).

See http://www-10.lotus.com/ldd/ddwiki.nsf/dx/07282008030431PMKMKQCW.htm and  http://www-01.ibm.com/support/docview.wss?uid=swg21962324.

To fully protect your webserver you would ideally apply all of the following headers(as per securityheaders.com ):

• Strict-Transport-Security
• Content-Security-Policy
• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy
• Feature-Policy

Due to the restriction above this is currently not possible without external hardware(like a load balancer).

It would be cool if we could set all of those headers directly in the Web Site Rule Document.