Comment by 1vuio0pswjnm7

Thank you. I confess I only looked for it in the HTTP headers, no search

For example, DDG puts it in the content-security-policy header