    public function sendHttpHeaders()
    {
        $https = $GLOBALS['PMA_Config']->isHttps();
        $mapTilesUrls = ' *.tile.openstreetmap.org *.tile.opencyclemap.org';

        /**
         * Sends http headers
         */
        $GLOBALS['now'] = gmdate('D, d M Y H:i:s') . ' GMT';
        if (! defined('TESTSUITE')) {
            /* Prevent against ClickJacking by disabling framing */
            if (! $GLOBALS['cfg']['AllowThirdPartyFraming']) {
                header(
                    'X-Frame-Options: DENY'
                );
            }
            header(
                "X-Content-Security-Policy: default-src 'self' "
                . $GLOBALS['cfg']['CSPAllow'] . ';'
                . "options inline-script eval-script;"
                . "img-src 'self' data: "
                . $GLOBALS['cfg']['CSPAllow']
                . ($https ? "" : $mapTilesUrls)
                . ";"
            );
            if (PMA_USR_BROWSER_AGENT == 'SAFARI'
                && PMA_USR_BROWSER_VER < '6.0.0'
            ) {
                header(
                    "X-WebKit-CSP: allow 'self' "
                    . $GLOBALS['cfg']['CSPAllow'] . ';'
                    . "options inline-script eval-script;"
                    . "img-src 'self' data: "
                    . $GLOBALS['cfg']['CSPAllow']
                    . ($https ? "" : $mapTilesUrls)
                    . ";"
                );
            } else {
The product receives input or data, but it does
        not validate or incorrectly validates that the input has the
        properties that are required to process the data safely and
        correctly.