Referrer-Policy: strict-origin Access-Control-Allow-Origin: *