v4.0.0

• ⚠️ Breaking: End of support for Internet Explorer (X-UA-Compatible and X-XSS-Protection headers) [4556277] [836467c]
• 🎉 Security first! Modernize TLS configuration [688348a]
• 🎉 Security first! Refresh policies-related headers usage
  • Add Cross Origin Policies headers (COOP/COEP/CORP) [25a569d]
  • Add Permissions-Policy header [36310b9]
  • Make Content-Security-Policy disallow 'object-src' by default [8600df1]
• Add mime-type image/jxl [b9ef881]
• Improve inline comments.