title: Adding security headers in response using spring security
body: <p>Am using spring security version 3.2. Am adding headers such as X-Frame-options, X-content-type-options in the response headers of the authenticated request.</p>
  
  <pre><code>&lt;sec:http auto-config="false"&gt;
       &lt;sec:headers&gt;
            &lt;sec:frame-options policy="DENY" /&gt;
            &lt;sec:content-type-options  /&gt;
            &lt;sec:xss-protection enabled="true" block="true" /&gt;
       &lt;/sec:headers&gt;
  &lt;/sec:http&gt;
  </code></pre>
  
  <p>but those headers are not get adding in the security none request.</p>
  
  <pre><code>&lt;sec:http security="none" pattern="/spring/loginpage" /&gt;
  </code></pre>
  
  <p>what might be the reason?</p>