/*
  X-XSS-Protection: 1; mode=block
  Referrer-Policy: same-origin
  X-Content-Type-Options: nosniff
  Strict-Transport-Security: max-age=86400; includeSubDomains
  Feature-Policy : camera 'none'; geolocation 'none'; microphone 'none'

/spa-assets/*
  Cache-Control: public,max-age=31536000

/_spa/*
  Cache-Control: public,max-age=31536000
