- full-time XSS protection (super filter against GPC)
- anti-bruteforce
- allow-IP
