header setifempty X-Permitted-Cross-Domain-Policies "none"
