/blogroll.opml
  Content-Disposition: attachment; filename=cory-dransfeldt-blogroll.opml

/*
  Content-Security-Policy: upgrade-insecure-requests; block-all-mixed-content;
  X-Frame-Options: DENY
  X-XSS-Protection: 1; mode=block
  Referrer-Policy: strict-origin-when-cross-origin, no-referrer-when-downgrade
  Permissions-Policy: autoplay=(), camera=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=()