For a long time it's been difficult to set Security Headers when you use certain hosted solutions like Ghost Pro or GitHub Pages. All of that is about to change and you can now quickly and easily deploy any security header of your choosing.
For details on how to use this Cloudflare Worker please visit the blog post here: https://scotthelme.co.uk/security-headers-cloudflare-worker