/*
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
/*.html
Content-Encoding: gzip, br
/*.css
/*.js