Tag Plugin: headers security