Header always set Cache-Control "max-age=3600,no-transform,public"
Header always set Content-Security-Policy "worker-src 'self';"