HTTP/1.1 200 OK Date: Thu, 09 Oct 2025 10:07:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding server: Mastodon x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: strict-origin-when-cross-origin vary: Accept, Accept-Language, Cookie, Signature cache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=3600 etag: W/"ba13dc7a4e00a74b3d38e0d6f0bebf5b" content-security-policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://indieweb.social; img-src 'self' data: blob: https://indieweb.social https://cdn.masto.host; media-src 'self' data: https://indieweb.social https://cdn.masto.host; manifest-src 'self' https://indieweb.social; form-action 'none'; child-src 'self' blob: https://indieweb.social; worker-src 'self' blob: https://indieweb.social; connect-src 'self' data: blob: https://indieweb.social https://cdn.masto.host wss://indieweb.social; script-src 'self' https://indieweb.social 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://indieweb.social 'nonce-t3cUnckh+nOn0kQPoQSsJQ==' x-request-id: 8573aacf-c46b-479f-943f-c51e8fc0f67a x-runtime: 0.014789 strict-transport-security: max-age=63072000; includeSubDomains Strict-Transport-Security: max-age=31536000 Content-Encoding: gzip