Vulnerabilities in secure_headers