ente/public/_headers

/*
    Cache-Control: no-store, must-revalidate
    Cross-Origin-Embedder-Policy:  require-corp
    Cross-Origin-Opener-Policy:  same-origin
    Strict-Transport-Security:  max-age=63072000
    X-Content-Type-Options: nosniff
    X-Download-Options: noopen
    X-Frame-Options: deny
    X-XSS-Protection: 1; mode=block
    Referrer-Policy: same-origin
    Content-Security-Policy-Report-Only: default-src 'none'; img-src 'self' blob:; style-src 'self' 'unsafe-inline'; font-src 'self'; script-src 'self';connect-src 'self' https://*.ente.io data:; report-uri https://csp-reporter.ente.workers.dev; report-to https://csp-reporter.ente.workers.dev;