/* Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Security-Policy: object-src 'none'; frame-ancestors 'none'; X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block