Config your IIS server to use the "Content-Security-Policy" header : <p>I need to add custom headers in IIS for 
"Content-Security-Policy", "X-Content-Type-Options" and "X-XSS-Protection".</p>

<p>I get the procedure to add these headers but i am not sure what should be the value of these keys.
<a href="https://technet.microsoft.com/pl-pl/library/cc753133(v=ws.10).aspx" rel="noreferrer">https://technet.microsoft.com/pl-pl/library/cc753133(v=ws.10).aspx</a></p>

<p><a href="http://content-security-policy.com/" rel="noreferrer">http://content-security-policy.com/</a></p>

<p>Please suggest. Thanks</p>
