* | regexHere -> replacement
file.js $ plain text -> replacement
file.js || singleRegex -> replacement
file.js $$ single plain text -> replacement
# Override the default headers for network requests.
* -> X-Frame-Options: DENY
*.html -> Content-Security-Policy: default-src 'self'; worker-src 'self' blob:;