HTTP/2 200 date: Fri, 26 Dec 2025 22:35:44 GMT content-type: text/html; charset=utf-8 content-encoding: gzip cf-ray: 9b440d8fee6a20c5-BLR cf-cache-status: MISS cache-control: max-age=0, private, must-revalidate etag: W/"efee8b03ad91154067a6973a756a4da3" set-cookie: _gitlab_session=d5d0a6ee68caa064bf9f6bc3343399e6; path=/; secure; HttpOnly; SameSite=None set-cookie: __cf_bm=utlV6Wb7yESeib_19rMXfbARCbm5DwALvfBUSCnLTPw-1766788544-1.0.1.1-4AIxz.IwiAZPspCKoEkvgWy779vWnGPTGdCrp2jLNcJEnzz52v.VizUk1C5qeYjZrZjEc3.wNb1zb_tXs6h2T1JuYV0kbEqduNVED8U9FjA; path=/; expires=Fri, 26-Dec-25 23:05:44 GMT; domain=.gitlab.com; HttpOnly; Secure; SameSite=None set-cookie: _cfuvid=oChHzOGAdJEW42x.ff.a1rzDwmnCPHsSvhHte_7uOg8-1766788544966-0.0.1.1-604800000; path=/; domain=.gitlab.com; HttpOnly; Secure; SameSite=None strict-transport-security: max-age=31536000 vary: Accept, Accept-Encoding content-security-policy: base-uri 'self'; child-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ 'self' blob: data: https://embed.figma.com https://www.figma.com https://www.youtube.com; connect-src 'self' https://gitlab.com wss://gitlab.com https://sentry.gitlab.net https://new-sentry.gitlab.net https://customers.gitlab.com https://snowplow.trx.gitlab.net https://sourcegraph.com https://collector.prd-278964.gl-product-analytics.com https://analytics.gitlab.com snowplowprd.trx.gitlab.net; default-src 'self'; font-src 'self'; form-action 'self' https: http:; frame-ancestors 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ https://embed.figma.com https://www.figma.com https://www.youtube.com; img-src 'self' data: blob: http: https:; manifest-src 'self'; media-src 'self' data: blob: http: https:; object-src 'none'; report-uri https://new-sentry.gitlab.net/api/4/security/?sentry_key=f5573e26de8f4293b285e556c35dfd6e&sentry_environment=gprd; script-src 'strict-dynamic' 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/ https://apis.google.com https://*.zuora.com/apps/PublicHostedPageLite.do 'nonce-x0l4TeYyy0YRTRPx7xEAXA=='; style-src 'self' 'unsafe-inline'; worker-src 'self' https://gitlab.com/assets/ blob: data: gitlab-lb: haproxy-main-13-lb-gprd gitlab-sv: web-gke-us-east1-b nel: {"max_age": 0} permissions-policy: interest-cohort=() ratelimit-limit: 500 ratelimit-name: throttle_unauthenticated_web ratelimit-observed: 1 ratelimit-remaining: 499 ratelimit-reset: 1766788560 referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-gitlab-meta: {"correlation_id":"9b440d8ff54420c5-ATL","version":"1"} x-permitted-cross-domain-policies: none x-request-id: 9b440d8ff54420c5-ATL x-runtime: 0.096313 x-ua-compatible: IE=edge x-xss-protection: 1; mode=block server: cloudflare