The HTML meta tag will only be used if the page is seen from a local disk file system through a file:// URL. See also W3 HTML spec chapter 5.two.two. Take treatment with this when you don't specify them programmatically because the webserver can namely include things like some default values.These directives does not mitigate any protection chance.