| Server | nginx |
| Content-Type | text/html; charset=UTF-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Keep-Alive | timeout=20 |
| Expires | Thu, 19 Nov 1981 08:52:00 GMT |
| Cache-Control | no-store, no-cache, must-revalidate |
| Pragma | no-cache |
| Content-Security-Policy | base-uri 'self'; connect-src *; default-src 'self' 'unsafe-eval' https://*.synology.com; font-src 'self' data: https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'self' ; frame-src 'self' https://*.synology.com https://www.google.com/maps/embed/ ; img-src 'self' data: blob: *.synology.com https://*.gstatic.com https://*.googleapis.com http://feather.aviary.com *.google-analytics.com http://*.twimg.com/ http://*.flickr.com/ http://*.staticflickr.com/ https://*.facebook.com https://*.googleusercontent.com https://*.fbcdn.net https://*.google.com http://*.sinaimg.cn https://dme0ih8comzn4.cloudfront.net/3.1.0.284/images/ ; report-uri /photo/csp_report.cgi; script-src 'self' 'unsafe-eval' https://*.synology.com https://*.google.com https://*.googleapis.com https://dme0ih8comzn4.cloudfront.net/js/feather.js feather.aviary.com http://featherservices.aviary.com *.google-analytics.com https://dme0ih8comzn4.cloudfront.net ; style-src 'self' 'unsafe-inline' https://*.googleapis.com http://feather.aviary.com https://dme0ih8comzn4.cloudfront.net; |
| X-Frame-Options | SAMEORIGIN |