anchor.diff:  If you are integrating https://projects.spring.io/spring-security/[Spring Security] with Spring Session, and want to ensure security details have been forwarded to the remote process, this is critical.
   
   === SecureHeaders GatewayFilter Factory
  -The SecureHeaders GatewayFilter Factory adds a number of headers to the response at the recommendation from https://blog.appcanary.com/2017/http-security-headers.html[this blog post].
  +The `SecureHeaders` GatewayFilter Factory adds a number of headers to the response at the recommendation from https://blog.appcanary.com/2017/http-security-headers.html[this blog post].
   
   .The following headers are added (along with default values):
    * `X-Xss-Protection:1; mode=block`
  
positive.code: Parameter `protocolsRegex` must be a valid regex `String`, against which the protocol name will be matched. If not matched, the filter will do nothing. Default is `http|https|ftp|ftps`.
  
  === RewriteResponseHeader GatewayFilter Factory
  The RewriteResponseHeader GatewayFilter Factory takes `name`, `regexp`, and `replacement` parameters. It uses Java regular expressions for a flexible way to rewrite the response header value.
  
  .application.yml
  [source,yaml]
  
negative.code: ----
  
  === DedupeResponseHeader GatewayFilter Factory
  The `DedupeResponseHeader` GatewayFilter Factory takes a `name` parameter and an optional `strategy` parameter. `name` can contain a list of header names, space separated.
  
  .application.yml
  [source,yaml]
  