HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Aug 2022 07:32:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Set-Cookie: october_session=eyJpdiI6Im5tQmJtWk53cXpGbnBwNVBhaHI5akE9PSIsInZhbHVlIjoiSFwvVWprNnpWcHdNbjQzaWtHa2lzczFSelQ0MmFPMlZCSitwUjB2bkNEU1wva1haYWhXS1BtbFlYQmRXZlZOM3hTcVp2bVNEaGNvaDVBeCtqYm80V0JaTnNkQTRaNEF0YzhrTFlnOXMraWtoU2hrQmlcLzhqQnNcL2grbmllTG80bUJEIiwibWFjIjoiYWJjNjE3ZDBmZWY1M2ZjZmJiN2E0OTRiOWYyNWQ1ZjQzNTYxMDM5MWJjNzRlYmM5MWRlNDc0YjA2NjUzODE3MyJ9; expires=Thu, 25-Aug-2022 09:32:28 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Strict-Transport-Security: max-age=15552123 ; includeSubDomains; preload
Access-Control-Allow-Origin: *
X-XSS-Protection: 1
Referrer-Policy: no-referrer-when-downgrade
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' https: ; script-src * 'unsafe-inline' 'unsafe-eval'; script-src-elem * 'unsafe-inline' 'unsafe-eval' ; script-src-attr * 'unsafe-inline' 'unsafe-eval'; style-src * data: 'unsafe-inline'; img-src * data: ; font-src * data: ; connect-src *; media-src *; object-src *; prefetch-src *; child-src *; frame-src *; worker-src *; frame-ancestors *; form-action 'self'; upgrade-insecure-requests; base-uri *; manifest-src *
X-Content-Security-Policy: default-src 'self' https: ; script-src * 'unsafe-inline' 'unsafe-eval'; script-src-elem * 'unsafe-inline' 'unsafe-eval' ; script-src-attr * 'unsafe-inline' 'unsafe-eval'; style-src * data: 'unsafe-inline'; img-src * data: ; font-src * data: ; connect-src *; media-src *; object-src *; prefetch-src *; child-src *; frame-src *; worker-src *; frame-ancestors *; form-action 'self'; upgrade-insecure-requests; base-uri *; manifest-src *
X-WebKit-CSP: default-src 'self' https: ; script-src * 'unsafe-inline' 'unsafe-eval'; script-src-elem * 'unsafe-inline' 'unsafe-eval' ; script-src-attr * 'unsafe-inline' 'unsafe-eval'; style-src * data: 'unsafe-inline'; img-src * data: ; font-src * data: ; connect-src *; media-src *; object-src *; prefetch-src *; child-src *; frame-src *; worker-src *; frame-ancestors *; form-action 'self'; upgrade-insecure-requests; base-uri *; manifest-src *
Permissions-Policy: accelerometer=(), autoplay=(self), battery=(self), camera=(), cross-origin-isolated=(self), display-capture=(), document-domain=(self), encrypted-media=(self), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=*, geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), navigation-override=(self), payment=(), picture-in-picture=*, publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=(self), clipboard-read=(), clipboard-write=(self), gamepad=(self), speaker-selection=(self), conversion-measurement=(), focus-without-user-activation=(self), hid=(slf), idle-detection=(self), serial=(), sync-script=(self), trust-token-redemption=(self), vertical-scroll=(self)
Vary: Accept-Encoding