"header cannot be recognized" when duplicated

[Virsacer]

I have
X-Content-Type-Options header cannot be recognized
X-XSS-Protection header cannot be recognized
but actually both headers are sent twice. - Not exactly sure why, since I'm using "SetIfEmpty"

So this is probably not optimal, but when the header is set it sould be detected even if it is sent multiple times...

[gene1wood]

@Virsacer can you share your domain name that manifests this problem?

[Virsacer]

Hi, thanks for looking into this.
https://observatory.mozilla.org/analyze/virsacer.net