Add a Strict-Transport-Security HTTP Response Header

Description

What It Does

This rule adds a Strict-Transport-Security HTTP response header (if not present) to ensure the client uses https:// for all hyperlinks even if returned content includes insecure http:// links.