HTTP/2 200 cache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400 content-encoding: gzip content-security-policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://cosocial.ca; img-src 'self' data: blob: https://cosocial.ca https://m.f-h.co; media-src 'self' data: https://cosocial.ca https://m.f-h.co; manifest-src 'self' https://cosocial.ca; form-action 'none'; child-src 'self' blob: https://cosocial.ca; worker-src 'self' blob: https://cosocial.ca; connect-src 'self' data: blob: https://cosocial.ca https://m.f-h.co wss://cosocial.ca; script-src 'self' https://cosocial.ca 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://cosocial.ca 'nonce-Ce8dShb1BulO0Nj6CtDUCQ==' content-type: text/html; charset=utf-8 date: Tue, 30 Dec 2025 08:40:59 GMT etag: W/"73148391848d4048060107ca8b663b6b" referrer-policy: same-origin server: Mastodon strict-transport-security: max-age=63072000; includeSubDomains strict-transport-security: max-age=31536000 vary: Accept-Encoding vary: Accept, Accept-Language, Cookie x-content-type-options: nosniff x-frame-options: DENY x-request-id: d75917e6-35d5-4525-9bdd-2b7fab68f111 x-runtime: 0.010811 x-xss-protection: 0