z/OS Connect Headers needed to pass a Security scan

We need the following headers added to the Response XML for zOS Connect (these are the Secure scan findings). Similar to how they were added for the CICS hosted services.

issue name-Missing "X-Content-Type-Options" header (Vul count-1)
cause:: It is possible to gather sensitive information about the web application such as usernames, passwords, machine name
and/or sensitive file locationsIt is possible to persuade a naive user to supply sensitive information such as username,
password, credit card number, social security number etc.
Fix: Config your server to use the "X-Content-Type-Options" header

issue name-Missing "Content-Security-Policy" header (Vul count-1)
cause: It is possible to gather sensitive information about the web application such as usernames, passwords, machine name
and/or sensitive file locationsIt is possible to persuade a naive user to supply sensitive information such as username,
password, credit card number, social security number etc.
Fix: Config your server to use the "Content-Security-Policy" header

issue name-Missing "X-XSS-Protection" header (vul count-1)
cause: It is possible to gather sensitive information about the web application such as usernames, passwords, machine name
and/or sensitive file locationsIt is possible to persuade a naive user to supply sensitive information such as username,
password, credit card number, social security number etc.
Fix: Config your server to use the "X-XSS-Protection" header

issue name-Missing HTTP Strict-Transport-Security Header
Cause: It is possible to gather sensitive information about the web application such as usernames, passwords, machine name
and/or sensitive file locationsIt is possible to persuade a naive user to supply sensitive information such as username,
password, credit card number, social security number etc.
Fix: Implement the HTTP Strict-Transport-Security policy