server/app.yaml [24:33]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    secure: always
    http_headers:
      X-Frame-Options: "DENY"
      Strict-Transport-Security: "max-age=2592000; includeSubdomains"
      X-Content-Type-Options: "nosniff"
      X-XSS-Protection: "1; mode=block"
      Content-Security-Policy: >-
        default-src 'none';
        object-src 'none';
        script-src 'self';
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



server/app.yaml [42:51]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    secure: always
    http_headers:
      X-Frame-Options: "DENY"
      Strict-Transport-Security: "max-age=2592000; includeSubdomains"
      X-Content-Type-Options: "nosniff"
      X-XSS-Protection: "1; mode=block"
      Content-Security-Policy: >-
        default-src 'none';
        object-src 'none';
        script-src 'self';
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



