https://dotnetfoundation.org/news-events/detail/increasing-your-aspnet-core-app-security-with-owasp-headers
https://www.c-sharpcorner.com/article/best-practices-for-securing-your-asp-net-core-mvc-application/