public virtual async Task Invoke(HttpContext context) { try { var headers = context.Response.Headers; Policy.BuildPolicies(); PolicyIsValid(); ImplementSecurityPolicy(headers); await Next(context); } catch { if (StopOnException) { throw; } } }