Server | nginx |
Content-Type | text/html; charset=utf-8 |
Transfer-Encoding | chunked |
Connection | keep-alive |
X-Frame-Options | SAMEORIGIN |
X-XSS-Protection | 1; mode=block |
X-Content-Type-Options | nosniff |
X-Download-Options | noopen |
Content-Security-Policy | default-src *;script-src http://www.google-analytics.com https://www.google-analytics.com http://platform.twitter.com https://platform.twitter.com https://syndication.twitter.com http://platform.vine.co https://platform.vine.co https://connect.facebook.net https://apis.google.com https://b.st-hatena.com 'unsafe-inline' 'self';img-src * data: blob: 'self';frame-src http://www.youtube.com https://www.youtube.com http://twitter.com https://twitter.com https://platform.twitter.com https://syndication.twitter.com https://amp.twimg.com http://ext.nicovideo.jp http://embed.pixiv.net http://vine.co https://vine.co http://player.vimeo.com https://player.vimeo.com http://www.slideshare.net https://w.soundcloud.com http://embed.ted.com https://www.mixcloud.com https://www.facebook.com https://s-static.ak.facebook.com https://platform.tumblr.com https://b.hatena.ne.jp 'self';font-src http://themes.googleusercontent.com https://themes.googleusercontent.com 'self';connect-src https://www.facebook.com https://connect.facebook.net https://s-static.ak.facebook.com https://www.google-analytics.jp 'self';style-src http://fonts.googleapis.com https://fonts.googleapis.com http://platform.twitter.com https://platform.twitter.com https://ton.twimg.com 'unsafe-inline' 'self' |
ETag | W/"3c60-C5b/VwNuqXWvpt7l8OkfqA" |
set-cookie | 8CUyk2EtAD=s%3AhF5ufh9vTIGBXDqZ60Qo4RqSZoAyhVbl.6fGsYfqIgT9Ka95wHsmmolF6tnL6F9ScyTWZCwQOuWw; Path=/; Expires=Fri, 20 Nov 2015 14:41:31 GMT; HttpOnly; Secure |
Vary | Accept-Encoding |
Content-Encoding | gzip |
Access-Control-Allow-Credentials | true |
Access-Control-Max-Age | 1728000 |
Access-Control-Allow-Methods | POST, GET, PUT, DELETE, OPTIONS |
Access-Control-Allow-Headers | Content-Type,X-CSRF-Token,X-Account-Token,Accept |