-Control: off Referrer-Policy: no-referrer X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-origin X-Frame-Options: sameorigin