HTTP/2 200 content-type: text/html; charset=utf-8 cross-origin-opener-policy: same-origin x-content-type-options: nosniff server: nginx via: 1.1 google, 1.1 varnish, 1.1 varnish x-robots-tag: noindex,nofollow x-frame-options: DENY strict-transport-security: max-age=31536000; includeSubDomains content-security-policy: connect-src 'self' https://api.accounts.firefox.com https://accounts.firefox.com https://graphql.accounts.firefox.com https://oauth.accounts.firefox.com https://profile.accounts.firefox.com wss://channelserver.services.mozilla.com https://channelserver.services.mozilla.com https://*.sentry.io https://cdn.accounts.firefox.com;default-src 'self';form-action 'self' https://accounts.google.com https://appleid.apple.com;font-src 'self' https://cdn.accounts.firefox.com;frame-src 'none';img-src 'self' blob: data: https://firefoxusercontent.com https://profile.accounts.firefox.com https://secure.gravatar.com https://cdn.accounts.firefox.com https://cdn.accounts.firefox.com;media-src blob:;object-src 'none';report-uri /_/csp-violation;script-src 'self' https://cdn.accounts.firefox.com;script-src-attr 'unsafe-hashes' 'sha256-uq+4nUqZONgARzmy2kR1w9EC+Qeig/Syd091LyT8vOk=';style-src 'self' https://cdn.accounts.firefox.com;base-uri 'self';frame-ancestors 'self';upgrade-insecure-requests x-xss-protection: 0 referrer-policy: no-referrer content-encoding: gzip etag: W/"1ee6-iq1GwHfW7mDjvmULBvaHXkLaLns" accept-ranges: bytes date: Fri, 03 Oct 2025 04:01:21 GMT x-served-by: cache-bom-vanm7210060-BOM, cache-bom-vanm7210060-BOM x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1759464081.843569,VS0,VE301 vary: Accept-Encoding