HTTP/2 200 content-type: text/html; charset=utf-8 content-security-policy: report-uri /_/BardChatUi/cspreport;default-src 'none';script-src * 'unsafe-inline' 'unsafe-eval' blob: data:;object-src * 'unsafe-inline' 'unsafe-eval';worker-src * 'unsafe-inline' 'unsafe-eval';img-src https://*.google.com https://*.googleusercontent.com https://*.gstatic.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.ggpht.com https://bard.datacommons.org blob: data: https://*.googleapis.com https://*.googletagmanager.com https://www.google.com https://google.com https://googleads.g.doubleclick.net;media-src https://*.google.com https://*.googleusercontent.com https://*.gstatic.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.ggpht.com https://bard.datacommons.org blob: https://*.googlevideo.com https://*.googleapis.com;child-src 'self' https://*.google.com https://*.scf.usercontent.goog https://www.youtube.com https://www.youtube-nocookie.com https://docs.google.com/picker/v2/home blob:;frame-src 'self' https://*.google.com https://*.scf.usercontent.goog https://www.youtube.com https://www.youtube-nocookie.com https://docs.google.com/picker/v2/home blob: https://www.googletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net;connect-src 'self' https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://csp.withgoogle.com/csp/proto/BardChatUi https://content-push.googleapis.com/upload/ https://*.googleusercontent.com https://ogads-pa.googleapis.com/ https://*.youtube.com https://*.youtube-nocookie.com https://*.googlevideo.com data: https://static.corp.google.com/external_content/scs_corp/bard/artifacts https://*.googleapis.com;style-src 'report-sample' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com;font-src https://fonts.gstatic.com https://www.gstatic.com;form-action https://ogs.google.com https://onegoogle-autopush.sandbox.google.com https://onegoogle-staging.sandbox.google.com https://studio.firebase.google.com/run.api;manifest-src 'none' content-security-policy: script-src 'report-sample' 'nonce-AJDNAjbYYeVYfFhnyyd3jg' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /_/BardChatUi/cspreport content-security-policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://maps.googleapis.com https://fonts.gstatic.com https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /_/BardChatUi/cspreport/allowlist content-security-policy: require-trusted-types-for 'script';report-uri /_/BardChatUi/cspreport x-frame-options: DENY vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site x-ua-compatible: IE=edge cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Wed, 24 Dec 2025 20:33:21 GMT p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=* cross-origin-opener-policy: same-origin-allow-popups content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.googleadservices.com/pagead/conversion/ https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtag/destination https://www.google.com/js/bg/ https://www.gstatic.com/external_hosted/highlightjs/highlight.pack.js https://www.gstatic.com/monaco_editor/ https://fonts.gstatic.com/s/e/notoemoji/search/wrapper.js https://www.youtube.com/iframe_api https://translate.google.com/translate_a/element.js https://www-onepick-opensocial.googleusercontent.com/gadgets/js/rpc.js https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://maps.googleapis.com/maps/api/js https://www.gstatic.com/_/mss/boq-bard-web/_/js/k=boq-bard-web.BardChatUi.en_US._xXRaC_evCY.2018.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://maps.googleapis.com/maps-api-v3/api/js/ https://maps.googleapis.com/maps/vt https://maps.googleapis.com/maps/api/js/ https://maps.googleapis.com/maps/api/place/js/ https://www.youtube.com/s/player/ https://translate.googleapis.com/_/translate_http/_/js/;report-uri /_/BardChatUi/cspreport/fine-allowlist accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/BardChatUi/web-reports?context=eJwN0HtMlQUYBnD69Hm9VIq6oYA4NSlHQHASj1fURMcRv_N9mqWiySVl6ZoXULyRooRkKqSIQJp4QxGmoM5Lm2hNlqVNDrdz5WhOjYtYyeKYnoE9f_y2d3ue9_3j7d_xZkj_AJ_YsQE-yuMWRSg2tFVRyTOlVfFS-O5WxUAe8tJxY5tymu7mtykW2tvVpuwn0_B2RaOHI9qVFtphP4QcOqsX4jxNmFeIaPquqRAFdJRO0rX2QtykId5CDKPcT4uQT4fpGJXROZr2eRHWrS7CRlJzijCfOq8V4ZOGe1hC2Y57yCfbgFrU59bCRt-eqEURpblqsYXOPajFJTIusGAqfZZnQTLdLrSgliKrLTCS33MLAmnbfxYED6pDCI1NqkMYnUmvQxVdP1SHnylyZD2mUXNiPe6uqUcdXd1Xj2pKnNmAFMp-1IA9lDqsEZk0JLQR_tQvshEDqby0EZU0999GzCf1YBPmU8mVJpyiQZOt8KPwqVZ8SNNpNkXvtSKGGnOteHHcim7adMWKbXSXLPTnLSs6KDDAhpE0eoYNTzbY8JS-Sbchl85SJY3fZMN0enurDUOoIMuGw1QeYkclGd63I3GRHSl0It6O4qV2dG6xw3erHaF7mNOTTjvaKbmPA2upYpgDBwIcCJrnwLu0c5UDh6hltwPPqCDPgZN09bYD1TTzsQOzKXCME6PoZbgTygdOdFOvCCeiYp2YRNXLnbhFNzKdqKGyYifOk-eME14K8nGhq7cLXpri70KQyYXRFB3vQgwl_uNCCl30uHCNKr0uXKavlWZk9m3GLvKb3ozhtCG2GVvpxcZmdFNGATsU52jGPFoW7EYSPYxwo4Vexbjxxiw38ha6cZD-ynTDQ6s9bqTRry_cuEdL-9znn-5jZMNrBFNx52uUUPp2k2RQxE6TjKd9h01STM8vm8RDx-6b5DSVbp4jFTT5-hyZQX4fxclwciyKEzf5LokTP-pfwJkqSuJk0u9xEk1ZHXGSQwbzXBlP-2g__bFwrvxNmp8q1nGqLDaq4j9LlRE0zqSKkfyTVAldqYqBPGmq9F6vytJLqiRS8S-qHKXnr1TpohyvKntocy-zZNJkX7NcDzPLTzTBYJYp1Gk0S8VMs1ygR8vMEp3NPN8sNdRaapYO6io3y0vquWAW5aJZltSYJYGcPWZ5QPpQTRbQzRBNbpESpQno2AJNSkkWazKAJmZoMo0Gb9fEj37YxQ49y-FenianCjQpo_IjmlRRbqkmB8hbqYlPlSYRNzQZR1LDe5RxR5MdVPSUt6inW5PePZr0GqBLPwocqMsoiqdldGaoLuXU9I4ujygomDntmKhLNo2J1uU9KonR5SRlfaxLDl2J1-VHsiXq4qK2FF06qGaVLr_RF2t0-ZIKU3Wpoku0KUuXr-hgni7f0-C3-u4_cuGO-JZ5alzK6NDkNesSktLSVqatT1q9Piw5KXV52MYVyWFpK1LTV6QmGCIMUZGGSGN4hDFhbdT_1j53mw" document-policy: include-js-call-stacks-in-crash-reports content-encoding: gzip server: ESF x-xss-protection: 0 x-content-type-options: nosniff server-timing: gfet4t7; dur=147 set-cookie: NID=527=NGArDl0PAHGGXRoeJDcBzhvJv_6Puft7SR3ZawDLECn1aUAsTG2YYPcdk6N7Clvd5teYT96dg-GBBd0qj244FJ2pFTqxKEESZhwvWUPpMj9kwLl07fs9ZIF-ay8l89ASb5oCqS4iMhZMJUjxQ1qMJpYKLMJYufXvy4qVlx4EwgxbEMk4hmp7uOzHskUlXj_jwU-cXLv0A8Jsefw; expires=Thu, 25-Jun-2026 20:33:21 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000