def METHOD_NAME(api_anon):
    api_anon.headers = {}
    expected_headers = {
        'Strict-Transport-Security': 'max-age=31536000; includeSubDomains; preload',
        'Content-Security-Policy': "default-src 'self'; frame-src 'none'; connect-src 'self'; font-src 'self' data:; "
                                   "img-src 'self' data:; media-src data:; script-src 'self' 'unsafe-eval'; "
                                   "style-src 'self' 'unsafe-inline'; base-uri 'self'; frame-ancestors 'none'; "
                                   "block-all-mixed-content; form-action 'none';",
        'X-Frame-Options': 'deny',
        'X-Content-Type-Options': 'nosniff',
        'Referrer-Policy': 'strict-origin-when-cross-origin',
        'X-XSS-Protection': '1; mode=block',
    }
    response = api_anon.get(https_url)
    for k, v in expected_headers.items():
        assert response.headers[k] == v