def METHOD_NAME(self, pyramid_request):
    tween = tweens.security_header_tween_factory(
        # pragma: nocover
        lambda req: req.response,
        pyramid_request.registry,
    )
    response = tween(pyramid_request)
    assert (
        response.headers["Referrer-Policy"]
        == "origin-when-cross-origin, strict-origin-when-cross-origin"
    )
    assert response.headers["X-XSS-Protection"] == "1; mode=block"