permittedCrossDomainPolicies

SecurityHeadersConfig

play

root

postBodyBuffer

CSRFConfig

preflightMaxAge

CORSConfig