Security Headers via Policy

Hi folks,

 

Can any one help me out with the following: I am trying to setup policies on the F5 for the following headers. I am however not sure if the policy have been setup correctly.

 

X-Content-Type-Options: nosniff

 

Content-Security-Policy: default-src

 

X-XSS-Protection: 1 code=block

 

X-Frame-Options: deny

 

Strict-Transport-Security: max-age=31536000 includeSubDomains