config/src/main/java/org/springframework/security/config/annotation/web/configurers/HeadersConfigurer.java
public HeadersConfigurer<H> defaultsDisabled() {
		contentTypeOptions.disable();
		xssProtection.disable();
		cacheControl.disable();
		hsts.disable();
		frameOptions.disable();
		return this;
	}
public HeadersConfigurer<H> defaultsDisabled() {
		contentTypeOptions.disable();
		xssProtection.disable();
		cacheControl.disable();
		hsts.disable();
		frameOptions.disable();
		return this;
	}
public HeadersConfigurer < H > defaultsDisabled ( ) { contentTypeOptions . disable ( ) ; xssProtection . disable ( ) ; cacheControl . disable ( ) ; hsts . disable ( ) ; frameOptions . disable ( ) ; return this ; }
Clears all of the default headers from the response. After doing so, one can add
headers back. For example, if you only want to use Spring Security's cache control
you can use the following:

<pre>
http.headers().defaultsDisabled().cacheControl();
</pre>

@return the {@link HeadersConfigurer} for additional customization
Clears all of the default headers from the response . After doing so one can add headers back . For example if you only want to use Spring Security s cache control you can use the following :