efault-src 'self'; frame-ancestors 'self'
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: geolocation=(self), microphone=()
set-cookie: strict
X-Firefox-Spdy: h2
