/*
  Referrer-Policy: no-referrer
  X-Frame-Options: DENY
  Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
  Permissions-Policy: camera=(), geolocation=(), microphone=(), payment=(), usb=(), accelerometer=()
  Cache-Control: public, max-age=300, immutable
  Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'
  ! Access-Control-Allow-Origin