set the header in default_headers if defined there

Author: naiyt

lib/secure_headers.rb

@@ -157,11 +157,19 @@ def set_a_header(name, klass, options=nil)
     def set_header(name_or_header, value=nil)
       if name_or_header.is_a?(Header)
         header = name_or_header
-        response.headers[header.name] = header.value
+        if default_header?(header.name)
+          Rails.application.config.action_dispatch.default_headers[header.name] = header.value
+        else
+          response.headers[header.name] = header.value
+        end
       else
         response.headers[name_or_header] = value
       end
     end
+
+    def default_header?(name)
+      Rails.application.config.action_dispatch.default_headers.has_key?(name)
+    end
   end
 end