ref: dd78d5b23fe597f4461aa4199401b4e07c0612e2 dir: /static/_headers/
/* X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff