Header set Cross-Origin-Embedder-Policy "require-corp" Header set Cross-Origin-Opener-Policy "same-origin" Header set Cache-Control "public, max-age=31536000, immutable"