| Content-Type | text/html; charset=utf-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Server | Mastodon |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |
| ETag | W/"55f091f7edb258bb4efb2f95168ccf37" |
| X-Request-Id | f6d446df-ef95-4013-b112-09a32b07ec15 |
| X-Runtime | 0.038598 |
| Access-Control-Allow-Origin | origin |
| Content-Security-Policy | frame-ancestors 'none'; default-src 'none'; script-src 'self'; object-src 'self'; style-src 'self' https://fonts.googleapis.com/; img-src * data:; media-src 'self' data:; frame-src 'none'; font-src 'self' data: https://fonts.gstatic.com/; connect-src 'self' wss://mastodon.host |
| Referrer-Policy | same-origin |
| Public-Key-Pins | max-age=1296000;pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=";pin-sha256="Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys=";pin-sha256="sRHdihwgkaib1P1gxX8HFszlD+7/gTfNvuAybgLPNis=";pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M="; |
| Cache-Control | max-age=0, private, must-revalidate, no-transform |
| X-Content-Type-Options | NOSNIFF |
| Frame-Options | DENY |
| X-Frame-Options | DENY |
| Strict-Transport-Security | max-age=31536000; includeSubDomains; preload |
| X-UA-Compatible | IE=Edge |
| X-XSS-Protection | 1; mode=block; |