{
  "Content-Security-Policy": [
    "default-src 'self'"
  ],
  "Content-Type": [
    "application/json; charset=utf-8"
  ],
  "Strict-Transport-Security": [
    "max-age=31536000"
  ],
  "X-Demo": [
    "kept"
  ]
}