Header always set Cache-Control "max-age=60,public" Header always set Content-Security-Policy "worker-src 'self';"