CloudFront Factory Headers

        'Strict-Transport-Security', value: 'max-age=63072000; includeSubdomains; preload'}]; 
        'Content-Security-Policy', value: "default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'"}]; 
        'X-Content-Type-Options', value: 'nosniff'}]; 
        'X-Frame-Options', value: 'DENY'}]; 
        'X-XSS-Protection', value: '1; mode=block'}]; 
        'Referrer-Policy', value: 'same-origin'}];