Some HTTP security headers are not properly set by the web server when sending responses to the client application.