HTTP/2 200 vary: Accept-Encoding content-encoding: gzip set-cookie: locale=en_US; expires=Sat, 18-Oct-2025 21:26:12 GMT; Max-Age=604800; path=/; domain=.oculus.com; secure; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.oculus.com/ajax/browser_error_reports/?device_level=unknown&brsid=7560078624371858216&cpp=C3&cv=1028313576&st=1760217972256", permissions_policy="https://www.oculus.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.oculus.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7560078624371858216&cpp=C3&cv=1028313576&st=1760217972256"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.oculus.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: *;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-SLIWQSSF' blob: 'self' *.oculus.com static.oculuscdn.com forums.oculusvr.com 'unsafe-eval' https://*.google-analytics.com https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com https://*.youtube.com www.redditstatic.com alb.reddit.com tags.tiqcdn.com gw.conversionsapigateway.com;style-src data: blob: 'unsafe-inline' *.oculus.com *.facebook.com *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://edge-chat-latest.oculus.com wss://edge-chat.oculus.com edge-chat.oculus.com edge-chat-latest.oculus.com gateway.oculus.com wss://gateway.oculus.com *.oculus.com *.oculuscdn.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://pixel-config.reddit.com/ https://www.redditstatic.com/ https://conversions-config.reddit.com/ gw.conversionsapigateway.com;font-src *.oculus.com data: *.fbcdn.net *.facebook.com *.oculuscdn.com *.akamaihd.net;img-src *.oculus.com *.fbcdn.net *.fbsbx.com *.facebook.com *.facebook.net *.fbthirdpartypixel.com *.oculuscdn.com *.meta.com data: blob: https://*.google-analytics.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.ytimg.com *.youtube.com alb.reddit.com *.akamaihd.net media-library.stackla.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ *.doubleclick.net https://www.google.com;media-src data: blob: *;child-src data: blob: *;frame-src *.oculus.com *.fbthirdpartypixel.com fbthirdpartypixel.com *.facebook.com *.fbsbx.com https://*.youtube.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ centinelapi.cardinalcommerce.com centinelapistag.cardinalcommerce.com client.cardinaltrusted.com cas.client.cardinaltrusted.com;manifest-src data: blob: *;object-src data: blob: *;worker-src data: blob: *;report-uri https://www.facebook.com/csp/reporting/?minimize=0;require-trusted-types-for 'script'; x-frame-options: DENY document-policy: force-load-at-top document-policy: include-js-call-stacks-in-crash-reports permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: same-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups pragma: no-cache cache-control: private, no-cache, no-store, must-revalidate expires: Sat, 01 Jan 2000 00:00:00 GMT x-content-type-options: nosniff x-xss-protection: 0 origin-agent-cluster: ?1 strict-transport-security: max-age=31536000; preload; includeSubDomains content-type: text/html; charset="utf-8" x-fb-debug: ZR49LHghLcXBU/rBjok1hejX3XMlccapsAl11XF2wP+sfi/7mPV6AmCXo3MyWccOL+LRWITWiqooYEzSUudXog== date: Sat, 11 Oct 2025 21:26:12 GMT