cache-control: public, max-age=2419200, immutable strict-transport-security: max-age=63072000; includeSubDomains x-content-type-options: nosniff content-security-policy: default-src 'none'; form-action 'none' accept-ranges: bytes X-Firefox-Spdy: h2