| Content-Type | text/html; charset=utf-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Server | Mastodon |
| X-Frame-Options | DENY |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 1; mode=block |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |
| ETag | W/"b82ab3bc2a1918f04e378cc82a0b26d4" |
| Cache-Control | max-age=0, private, must-revalidate |
| X-Request-Id | a3b5950f-1bb9-4d70-afd2-e1c604c48ee5 |
| X-Runtime | 0.059354 |
| Strict-Transport-Security | max-age=31536000; includeSubDomains; preload |
| Referrer-Policy | strict-origin-when-cross-origin |
| Content-Security-Policy | default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' wss://mastodon.fun; |
| Public-Key-Pins | pin-sha256="rXwuTxkcM9x1l7hvF+bBz06LZrWWLg3uxL+g2ghfnOs="; pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; pin-sha256="Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys=" ; max-age=5184000; includeSubDomains; |