HTTP/2 200 
date: Wed, 13 Sep 2023 20:51:51 GMT
content-type: application/activity+json; charset=utf-8
server: Mastodon
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
permissions-policy: interest-cohort=()
referrer-policy: same-origin
vary: Accept, Origin
cache-control: max-age=180, public
etag: W/"5e9ce27c613d406bf03a89abee8afcc2"
content-security-policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://framapiaf.org https://framasoft.org; img-src 'self' https: data: blob: https://framapiaf.org https://stats.framasoft.org https://framasoft.org https://framaclic.org; style-src 'self' https://framapiaf.org https://framasoft.org 'nonce-RmzG6WFuN1vGHeB9SxWPDg=='; media-src 'self' https: data: https://framapiaf.org; frame-src 'self' https:; manifest-src 'self' https://framapiaf.org; form-action 'self'; connect-src 'self' data: blob: https://framapiaf.org https://stockage.framapiaf.org wss://framapiaf.org https://framasoft.org; script-src 'self' https://framapiaf.org 'wasm-unsafe-eval' https://framasoft.org; child-src 'self' blob: https://framapiaf.org https://framasoft.org; worker-src 'self' blob: https://framapiaf.org https://framasoft.org
x-request-id: 0def0f73-2fe0-4671-a9bb-23bf945cebaf
x-runtime: 0.012049
strict-transport-security: max-age=63072000; includeSubDomains
x-cached: EXPIRED
strict-transport-security: max-age=31536000; includeSubDomains; preload
permissions-policy: interest-cohort=()

