HTTP/2 301 date: Sat, 27 Dec 2025 13:25:27 GMT content-type: text/html content-length: 162 location: https://qlty.sh/gh/fossasia/projects/AYABInterface server: nginx strict-transport-security: max-age=31536000; includeSubDomains; preload referrer-policy: origin-when-cross-origin cross-origin-opener-policy: same-origin HTTP/2 302 date: Sat, 27 Dec 2025 13:25:27 GMT content-security-policy: default-src 'self'; connect-src 'self' https://*.auryc.com https://*.sentry.io https://cdn.prod.website-files.com https://checkout.stripe.com https://api.stripe.com https://checkout.stripe.com https://connect-js.stripe.com https://maps.googleapis.com https://surveys-web.delighted.com https://web.delighted.com wss://ws.pusherapp.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.prod.website-files.com https://checkout.stripe.com https://js.stripe.com https://*.js.stripe.com https://maps.googleapis.com https://d2yyd1h5u9mauk.cloudfront.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://surveys-web.delighted.com; worker-src 'self' blob:; font-src 'self' https://fonts.gstatic.com https://*.auryc.com https://cdn.prod.website-files.com; img-src 'self' blob: data: https://avatars.githubusercontent.com https://images.unsplash.com https://cdn.jsdelivr.net https://tailwindui.com https://cdn.prod.website-files.com https://*.stripe.com https://surveys-web.delighted.com; frame-src 'self' https://demo.arcade.software https://checkout.stripe.com https://connect-js.stripe.com https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com; media-src 'self'; child-src 'self' https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://demo.arcade.software; form-action 'self'; location: /login?returnTo=%2Fgh%2Ffossasia%2Fprojects%2FAYABInterface x-dns-prefetch-control: on strict-transport-security: max-age=63072000; includeSubDomains; preload x-frame-options: SAMEORIGIN permissions-policy: camera=(), microphone=(), geolocation=() x-content-type-options: nosniff referrer-policy: origin-when-cross-origin x-cache: Miss from cloudfront via: 1.1 d942f8ef48f63d454c59316dd4c02a7c.cloudfront.net (CloudFront) x-amz-cf-pop: BOM78-P8 x-amz-cf-id: obTxRMzpSZbXMfM_DdgHHd6fLdesKrYeYP2_PvK7aYHbyqv2RgyF9Q== HTTP/2 200 content-type: text/html; charset=utf-8 date: Sat, 27 Dec 2025 13:25:28 GMT vary: Accept-Encoding content-encoding: gzip x-dns-prefetch-control: on strict-transport-security: max-age=63072000; includeSubDomains; preload x-frame-options: SAMEORIGIN permissions-policy: camera=(), microphone=(), geolocation=() x-content-type-options: nosniff referrer-policy: origin-when-cross-origin content-security-policy: default-src 'self'; connect-src 'self' https://*.auryc.com https://*.sentry.io https://cdn.prod.website-files.com https://checkout.stripe.com https://api.stripe.com https://checkout.stripe.com https://connect-js.stripe.com https://maps.googleapis.com https://surveys-web.delighted.com https://web.delighted.com wss://ws.pusherapp.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.prod.website-files.com https://checkout.stripe.com https://js.stripe.com https://*.js.stripe.com https://maps.googleapis.com https://d2yyd1h5u9mauk.cloudfront.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://surveys-web.delighted.com; worker-src 'self' blob:; font-src 'self' https://fonts.gstatic.com https://*.auryc.com https://cdn.prod.website-files.com; img-src 'self' blob: data: https://avatars.githubusercontent.com https://images.unsplash.com https://cdn.jsdelivr.net https://tailwindui.com https://cdn.prod.website-files.com https://*.stripe.com https://surveys-web.delighted.com; frame-src 'self' https://demo.arcade.software https://checkout.stripe.com https://connect-js.stripe.com https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com; media-src 'self'; child-src 'self' https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://demo.arcade.software; form-action 'self'; cache-control: no-store pragma: no-cache set-cookie: _qlty_sess=IjA3YmJhODYyNDZjY2JmMGUi.p1yqxBm3xQVNRZQ%2FHHoIG9WKiKUvnuGC4p8Ul%2BO8ayg; Max-Age=259200; Path=/; HttpOnly; Secure; SameSite=Lax x-cache: Miss from cloudfront via: 1.1 d942f8ef48f63d454c59316dd4c02a7c.cloudfront.net (CloudFront) x-amz-cf-pop: BOM78-P8 x-amz-cf-id: sv_C5UqscjxJw4NEArfSJif4rBnzNb1ftY6tunQuVgf5zmu5RLIu4w==