Hi alfons38,

Here you see a couple of items you should consider, as shown by this example: https://securityheaders.com/2013/06/02/com-theus.php
This is at the culprit: http://git.php.net/?p=php-src.git;a=commitdiff;h=7d163e8a0880ae8af2dd869071393e5dc07ef271;hp=e964817b244d091dc38f59f5d7f1735110b698af (link author Rob Richards)

polonus