Referrer-Policy: no-referrer
Cross-Origin-Embedder-Policy: require-corp