aaPanel_Kern
I had added the headers in site config. Here are the headers that i added in site config. Without NGINX cache (NGINX Helper) its working fine.
add_header X-XSS-Protection "1; mode=block";
add_header X-Frame-Options "ALLOW-FROM *";
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "strict-origin-when-cross-origin";
add_header Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()";
add_header Content-Security-Policy "upgrade-insecure-requests";
Permission, referral and content security is what having problems.