/*
  X-XSS-Protection: 1; mode=block
  X-Content-Type-Options: nosniff
/sync-bridge.html
  Content-Security-Policy: frame-ancestors *
/css/*
  Cache-Control: public, max-age=0, must-revalidate
/js/*
  Cache-Control: public, max-age=0, must-revalidate
