/*
  X-Robots-Tag: noindex, nofollow
  Content-Security-Policy: default-src 'none';
  Referrer-Policy: origin