/svg+xml strict-transport-security: max-age=31536000; includeSubDomains; preload access-control-allow-methods: GET, HEAD, OPTIONS access-control-allow-headers: * alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2