/* X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: camera=(), microphone=(), geolocation=() Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://*.workers.dev wss://*.workers.dev; frame-ancestors 'none'; /assets/* Cache-Control: public, max-age=31536000, immutable /index.html Cache-Control: public, max-age=0, must-revalidate /*.js Cache-Control: public, max-age=31536000, immutable /*.css Cache-Control: public, max-age=31536000, immutable /*.woff2 Cache-Control: public, max-age=31536000, immutable /*.woff Cache-Control: public, max-age=31536000, immutable /*.ttf Cache-Control: public, max-age=31536000, immutable /*.eot Cache-Control: public, max-age=31536000, immutable /*.svg Cache-Control: public, max-age=31536000, immutable /*.png Cache-Control: public, max-age=31536000, immutable /*.jpg Cache-Control: public, max-age=31536000, immutable /*.jpeg Cache-Control: public, max-age=31536000, immutable /*.gif Cache-Control: public, max-age=31536000, immutable /*.webp Cache-Control: public, max-age=31536000, immutable /*.ico Cache-Control: public, max-age=31536000, immutable