Introduce X-XSS-Protection header

Change-Id: I1b85d04743361343a09ca6d32593720a991a9e9f
diff --git a/Changes b/Changes
index f0b921a..c107578 100755
--- a/Changes
+++ b/Changes
@@ -13,6 +13,7 @@
         - Send 'nosniff' header.
         - defer main script.
         - Introduce X-Frame-Options header.
+        - Introduce X-XSS-Protection header.
 
 0.40 2020-12-17
         - Modernize ES and fix in-loops.