@Test public void set_secured_headers() throws ServletException, IOException { underTest.init(mock(FilterConfig.class)); HttpServletRequest request = newRequest("GET"); underTest.doFilter(request, response, chain); verify(response, times(3)).addHeader(startsWith("X-"), anyString()); underTest.destroy(); }