pub const BY_CONTENT_TYPE: &'static str = "by-content-type";
X-Permitted-Cross-Domain-Policies: by-content-type