HTTP/1.1 200 OK Date: Thu, 09 Oct 2025 01:08:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding server: Mastodon x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: same-origin vary: Accept, Accept-Language, Cookie, Origin cache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=3600 etag: W/"92d4b3c54ad96db7c95a389256667433" content-security-policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://fedi.simonwillison.net; img-src 'self' data: blob: https://fedi.simonwillison.net https://cdn.masto.host; media-src 'self' data: https://fedi.simonwillison.net https://cdn.masto.host; manifest-src 'self' https://fedi.simonwillison.net; form-action 'none'; child-src 'self' blob: https://fedi.simonwillison.net; worker-src 'self' blob: https://fedi.simonwillison.net; connect-src 'self' data: blob: https://fedi.simonwillison.net https://cdn.masto.host wss://fedi.simonwillison.net; script-src 'self' https://fedi.simonwillison.net 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://fedi.simonwillison.net 'nonce-UMAQJFNWzxpleP4YLvI93Q==' x-request-id: 16024256-eb86-44ed-b85f-875f3eb02494 x-runtime: 0.035750 strict-transport-security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=31536000 Content-Encoding: gzip