I use Nextcloud. Even though I do not specify an X header*, when I search the header with a web browser development tool such as Firefox, the X header is already specified.
*X-Frame-Options, X-Content-Type-Options, X-XSS-Protection, X-Download-Options, X-Permitted-Cross-Domain-Policies
Does...