Um analista de TI pretende habilitar o mecanismo CORS para

A add_header Access-Control-Allow-Origin *; B add_header Strict-Transport-Security "max-age=31536000; includeSubdomains"; C add_header Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" always;  D add_header Cache-Control "max-age=0, no-cache, no-store, must-revalidate"; E add_header X-Frame-Options "SAMEORIGIN" always;