See: https://security.stackexchange.com/questions/225415/are-favicon-ico-robots-text-sitemap-xml-vulnerable-to-xss Per: https://caniuse.com/#search=X-XSS-Protection https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection --- 
