ontent-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: origin content-language: en-US, en accept-ranges: bytes X-Firefox-Spdy: h2