Referrer-Policy: no-referrer Referrer-Policy: origin,not-a-valid-token