if x-dg-image-manager: static timing-allow-origin: * access-control-allow-origin: * strict-transport-security: max-age=31536000 ; includeSubDomains ; preload X-Firefox-Spdy: h2