HTTP/2 200 content-type: text/html; charset=utf-8 date: Thu, 29 Jan 2026 09:59:25 GMT vary: Accept-Encoding content-encoding: gzip surrogate-control: no-store cache-control: no-store, no-cache, must-revalidate, proxy-revalidate pragma: no-cache expires: 0 x-frame-options: SAMEORIGIN reporting-endpoints: csp-endpoint="https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubf89cdec407bbb96fdd48a9726f00e7be&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aedpuzzle-server%2Cenv%3Aproduction%2Cversion%3A7.47.12" content-security-policy-report-only: script-src 'nonce-Z4L5UFoyW3cMTuWdWN1KBA==' 'strict-dynamic' 'unsafe-eval';script-src-elem 'nonce-Z4L5UFoyW3cMTuWdWN1KBA==' 'strict-dynamic' 'unsafe-eval';script-src-attr 'nonce-Z4L5UFoyW3cMTuWdWN1KBA==' 'strict-dynamic' 'unsafe-eval';connect-src 'self' *.edpuzzle.com *.edpuzzle.dev *.edpuzzle.net images.edpuzzle.com https://*.awswaf.com *.nr-data.net *.mxpnl.com *.mixpanel.com https://service.mtcaptcha.com https://service2.mtcaptcha.com *.google-analytics.com *.googleapis.com *.googleusercontent.com accounts.google.com login.microsoftonline.com wss://5uj9b5geqb.execute-api.us-east-1.amazonaws.com wss://5k3vufy1vh.execute-api.us-east-1.amazonaws.com wss://api.appcues.com wss://api.appcues.net *.appcues.com *.appcues.net audio-uploads-us-standard.s3.amazonaws.com audio-uploads-us-standard.s3.us-east-1.amazonaws.com test-audio-uploads-us-standard.s3.amazonaws.com test-audio-uploads-us-standard.s3.us-east-1.amazonaws.com uploaded-profile-images-us-standard.s3.amazonaws.com test-uploaded-profile-images.s3.amazonaws.com edpuzzle-dev-student-images-cdk.s3.amazonaws.com edpuzzle-dev-student-images-cdk.s3.us-east-1.amazonaws.com edpuzzle-prod-student-images-cdk.s3.amazonaws.com edpuzzle-prod-student-images-cdk.s3.us-east-1.amazonaws.com edpuzzle-dev-teacher-images-cdk.s3.amazonaws.com edpuzzle-dev-teacher-images-cdk.s3.us-east-1.amazonaws.com edpuzzle-prod-teacher-images-cdk.s3.amazonaws.com edpuzzle-prod-teacher-images-cdk.s3.us-east-1.amazonaws.com edpuzzle-dev-teacher-files-cdk.s3.amazonaws.com edpuzzle-dev-teacher-files-cdk.s3.us-east-1.amazonaws.com edpuzzle-dev-student-files-cdk.s3.amazonaws.com edpuzzle-dev-student-files-cdk.s3.us-east-1.amazonaws.com edpuzzle-prod-teacher-files-cdk.s3.amazonaws.com edpuzzle-prod-teacher-files-cdk.s3.us-east-1.amazonaws.com edpuzzle-prod-student-files-cdk.s3.amazonaws.com edpuzzle-prod-student-files-cdk.s3.us-east-1.amazonaws.com res.cdn.office.net video-uploads-us-standard.s3.amazonaws.com test-video-uploads-us-standard.s3.amazonaws.com uploaded-images-us-standard.s3.amazonaws.com test-uploaded-images-dev-us-standard.s3.amazonaws.com test-thumbnails-delivery-us-standard.s3.amazonaws.com thumbnails-delivery-us-standard.s3.amazonaws.com vimeo.com *.browser-intake-datadoghq.com browser-intake-datadoghq.com https://*.googletagmanager.com;frame-ancestors 'self';frame-src *;img-src * 'self' data: blob:;style-src * 'unsafe-inline' 'self';media-src * 'self' blob:;report-to csp-endpoint;report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubf89cdec407bbb96fdd48a9726f00e7be&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aedpuzzle-server%2Cenv%3Aproduction%2Cversion%3A7.47.12;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action * 'self';object-src 'none';worker-src 'self' blob:;upgrade-insecure-requests referrer-policy: same-origin strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-xss-protection: 0 set-cookie: edpuzzleCSRF=-8NQxlW9FDDxyFLIuApKyBOf; Path=/; HttpOnly; Secure; SameSite=None etag: W/"1722-NE5jLa9g4VCWY6d8xS6Z2PCYnF4" server: edpuzzle x-cache: Miss from cloudfront via: 1.1 50fc279696fd1dc25e1be709a2bc01dc.cloudfront.net (CloudFront) x-amz-cf-pop: BOM54-P2 x-amz-cf-id: LH2aiwtcHtn7g92O_qZ2g3rqoSXRObS_l9zcuWAS4Yv6HCR5HQZXaw==