/*
  X-Frame-Options: SAMEORIGIN
  X-Content-Type-Options: nosniff
  Referrer-Policy: strict-origin-when-cross-origin
  Permissions-Policy: accelerometer=(), camera=(), geolocation=(), microphone=(), payment=()

/*.html
  Cache-Control: public, max-age=0, must-revalidate

/YeetCraft.html
  Cache-Control: public, max-age=3600, must-revalidate
  Cross-Origin-Opener-Policy: same-origin-allow-popups

/api/*
  Access-Control-Allow-Origin: *
  Access-Control-Allow-Methods: GET, POST, OPTIONS
  Access-Control-Allow-Headers: Content-Type
