https://www.w3.org/TR/referrer-policy/
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
https://www.codeproject.com/Articles/1223383/Securing-HTTP-response-header-via-IIS
https://medium.com/@hariomvashisth/cors-on-nginx-be38dd0e19df