config/src/main/java/org/springframework/security/config/annotation/web/configurers/HeadersConfigurer.java
public HeadersConfigurer<H> defaultsDisabled() {
		contentTypeOptions.disable();
		xssProtection.disable();
		cacheControl.disable();
		hsts.disable();
		frameOptions.disable();
		return this;
	}
public HeadersConfigurer<H> defaultsDisabled() {
		contentTypeOptions.disable();
		xssProtection.disable();
		cacheControl.disable();
		hsts.disable();
		frameOptions.disable();
		return this;
	}
Clears all of the default headers from the response. After doing so, one can add
headers back. For example, if you only want to use Spring Security's cache control
you can use the following:

<pre>
http.headers().defaultsDisabled().cacheControl();
</pre>

@return the {@link HeadersConfigurer} for additional customization