pub const BY_CONTENT_TYPE: &str = "by-content-type";
X-Permitted-Cross-Domain-Policies: by-content-type