Content-Type | text/html; charset=utf-8 |
Transfer-Encoding | chunked |
Connection | keep-alive |
Server | Mastodon |
X-Frame-Options | DENY |
X-Content-Type-Options | nosniff |
X-XSS-Protection | 1; mode=block |
Vary | Accept-Encoding |
Content-Encoding | gzip |
ETag | W/"cd2effa79d55a6d3766e63eb4ad8fbf6" |
Cache-Control | max-age=0, private, must-revalidate |
X-Request-Id | a32b04a6-e565-495d-be93-3fcb1661fb93 |
X-Runtime | 0.014433 |
Strict-Transport-Security | max-age=15552000; includeSubDomains; preload |
Content-Security-Policy | default-src 'none'; font-src 'self'; media-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self'; img-src 'self' https://instance.mastodon.top https://img.virtubox.net https://ga.vtbox.net data:; connect-src 'self' wss://mastodon.top; frame-ancestors 'none'; |
Referrer-Policy | strict-origin-when-cross-origin |
Public-Key-Pins | pin-sha256="RO1pvFg3/TNoi/pMPlpeaqNY5QaZH9NAsLRgkHBWnoA="; pin-sha256="746Xt9jqEwaLxhNA//kw9PfPSqjBiC/CjFNPHn1vXSY="; pin-sha256="DzDeaKDImc2/cXpmCMJXSsS+ORB4RJa+Q9MKTlcgei0="; max-age=5184000; includeSubDomains; preload |