Question: I have many of these "controllers": 

```
app.get('/',function(req,res){
    var stuff = { 'title': 'blah' };
    res.render('mytemplate',stuff);
});    

```

Notice res.render? I want to add this header to every response header I make:

`X-XSS-Protection: 0`

How can I add that response header automatically?

Answer: 
```
// global controller
app.get('/*',function(req,res,next){
    res.header('X-XSS-Protection' , 0 );
    next(); // http://expressjs.com/guide.html#passing-route control
});

```

Just make sure this is the first controller you add, order is significant.
I find that another good place to inject default headers is during the Routing Middleware. This way, all routes controlled by the router instance will receive the headers. 

For example:

```js
//...
var router = express.Router();

// middleware for all routes
router.use(function(req, res, next) {
  // inject default headers
  res.header('cache-control', 'private, max-age=0');
  res.header('expires', new Date(Date.now()).toUTCString());
  next();
});

// all routes below will now inherit 
// the middleware's default headers
router.get('/users', function(req, res){
   // I will return the user list, with default headers
   // ...
});

```