HTTP/2 302 access-control-allow-origin: * content-security-policy: base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: res.cloudinary.com; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'strict-dynamic' 'nonce-{{nonce}}'; upgrade-insecure-requests; content-type: text/html cross-origin-embedder-policy: credentialless cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin date: Sat, 27 Dec 2025 20:54:00 GMT location: /en origin-agent-cluster: ?1 permissions-policy: camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=() referrer-policy: no-referrer strict-transport-security: max-age=15552000; includeSubDomains vary: Accept-Encoding via: 2.0 spaces-router (878c4b46ede4) x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 content-length: 89 HTTP/2 200 access-control-allow-origin: * content-encoding: gzip content-security-policy: base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: res.cloudinary.com; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'strict-dynamic' 'nonce-gJWJix+By6RQwknbuNgfzQQw'; upgrade-insecure-requests; content-type: text/html;charset=utf-8 cross-origin-embedder-policy: credentialless cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin date: Sat, 27 Dec 2025 20:54:00 GMT origin-agent-cluster: ?1 permissions-policy: camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=() referrer-policy: no-referrer set-cookie: __Host-csrf=52df79c9-16f4-41b6-a4f3-786bab6afb8b; Path=/; HttpOnly; Secure; SameSite=Strict strict-transport-security: max-age=15552000; includeSubDomains vary: Accept-Encoding via: 2.0 spaces-router (878c4b46ede4) x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-ratelimit-limit: 150 x-ratelimit-remaining: 148 x-ratelimit-reset: 1766869140563 x-xss-protection: 0 content-length: 25472