listen 9527;
server_name localhost;
add_header Content-Security-Policy: default-src=self;
add_header X-Xss-Protection: 1;
add_header X-Xss-Protection: mod=block;
add_header X-Content-Type-Options: nosniff;