fn iframe_security_headers() -> [(HeaderName, &'static str); 4]
Security headers for iframe responses