Adding one fix back to check for minimum required

Author: basiliskus

app/src/main/java/gov/hhs/cdc/trustedintermediary/external/javalin/App.java

@@ -52,6 +52,7 @@ public static void main(String[] args) {
                 ctx -> {
                     ctx.header("X-Content-Type-Options", "nosniff");
                     // Fix for https://www.zaproxy.org/docs/alerts/90004
+                    ctx.header("Cross-Origin-Resource-Policy", "same-origin");
                 });
 
         try {