HTTP/2 200 content-type: text/html; charset=utf-8 vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site x-frame-options: DENY content-security-policy: report-uri /_/BardChatUi/cspreport;default-src 'none';script-src * 'unsafe-inline' 'unsafe-eval' blob: data:;object-src * 'unsafe-inline' 'unsafe-eval';worker-src * 'unsafe-inline' 'unsafe-eval';img-src https://*.google.com https://*.googleusercontent.com https://*.gstatic.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.ggpht.com https://bard.datacommons.org blob: data: https://*.googleapis.com https://*.googletagmanager.com https://www.google.com https://google.com https://googleads.g.doubleclick.net;media-src https://*.google.com https://*.googleusercontent.com https://*.gstatic.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.ggpht.com https://bard.datacommons.org blob: https://*.googlevideo.com https://*.googleapis.com;child-src 'self' https://*.google.com https://*.scf.usercontent.goog https://www.youtube.com https://www.youtube-nocookie.com https://docs.google.com/picker/v2/home blob:;frame-src 'self' https://*.google.com https://*.scf.usercontent.goog https://www.youtube.com https://www.youtube-nocookie.com https://docs.google.com/picker/v2/home blob: https://www.googletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net;connect-src 'self' https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://csp.withgoogle.com/csp/proto/BardChatUi https://content-push.googleapis.com/upload/ https://*.googleusercontent.com https://ogads-pa.googleapis.com/ https://*.youtube.com https://*.youtube-nocookie.com https://*.googlevideo.com data: https://static.corp.google.com/external_content/scs_corp/bard/artifacts https://*.googleapis.com;style-src 'report-sample' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com;font-src https://fonts.gstatic.com https://www.gstatic.com;form-action https://ogs.google.com https://onegoogle-autopush.sandbox.google.com https://onegoogle-staging.sandbox.google.com https://studio.firebase.google.com/run.api;manifest-src 'none' content-security-policy: script-src 'report-sample' 'nonce-XefACFkvJXds-JqYZ08xAw' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /_/BardChatUi/cspreport content-security-policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://maps.googleapis.com https://fonts.gstatic.com https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /_/BardChatUi/cspreport/allowlist content-security-policy: require-trusted-types-for 'script';report-uri /_/BardChatUi/cspreport x-ua-compatible: IE=edge cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Tue, 30 Dec 2025 00:49:43 GMT p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." cross-origin-opener-policy: same-origin-allow-popups accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.googleadservices.com/pagead/conversion/ https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtag/destination https://www.google.com/js/bg/ https://www.gstatic.com/external_hosted/highlightjs/highlight.pack.js https://www.gstatic.com/monaco_editor/ https://fonts.gstatic.com/s/e/notoemoji/search/wrapper.js https://www.youtube.com/iframe_api https://translate.google.com/translate_a/element.js https://www-onepick-opensocial.googleusercontent.com/gadgets/js/rpc.js https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://maps.googleapis.com/maps/api/js https://www.gstatic.com/_/mss/boq-bard-web/_/js/k=boq-bard-web.BardChatUi.en_US._xXRaC_evCY.2018.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://maps.googleapis.com/maps-api-v3/api/js/ https://maps.googleapis.com/maps/vt https://maps.googleapis.com/maps/api/js/ https://maps.googleapis.com/maps/api/place/js/ https://www.youtube.com/s/player/ https://translate.googleapis.com/_/translate_http/_/js/;report-uri /_/BardChatUi/cspreport/fine-allowlist permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=* reporting-endpoints: default="/_/BardChatUi/web-reports?context=eJwN0HdM1AcUB3B6-n2u1NmcAmLUlMZQoHAVzzqIFjSe-BuOVotWRpRU02gFxNmKIlKLgguBasWFIERxxNFEtC2kWjFyrJuc1lTLkA5JOaMXsN8_Pnkv7_vy_niD7w0JGRzgt3hSgJ_haZtBaF5ou0Eh74x2g4_C97YbTOQlH50ydxjOUd3hDoOV9vV0GA6SZWynQaMn4zoNbbTTcRQ5dF4vxEWaurAQ0XSgpRAFdILO0M3OQtyhUb5CjKG8T4twmI7RSSqnC7RhXRE2kZJThEXUfbMInzQ9xHLKdj5EIdmH1qMxrx52-u50PY5TmrseW-nC43pcJfMSK2bS5_lWJNPdQivqKbLaCjMZX1gRSMEjGhBCk5IaEEZlGQ24RLeONuBnihzfiBhqTWxE3fpGNNCN_Y2opsSYJqRQ9h9NyKXUMc3YTaNCm-FPgyKbMYwqSptRRQv-a8YiUo60YBGVXG_BWRox3QYjhc-04UOaRXOpLtaGForeZ0MsNefZ8PKUDb20-boN31AdWenPGhu6KDDAjvE0cbYdzzba8Zy-zbAjj85TFU3ZbMcsenubHaOoIMuOY1QR4kAVmd53IHGZAyl0Ot6B4hUOdG914J1tDoTmMqdn3Q50UvIAJ9KpcowThwKcCFroxHu0a60TR6ltrxN_UUG-E2foxl0nqinmqRNzKfBdFybQq3AXDB-40Ev9IlyImufCNKpe5UIN3c50oZbKi124SN4yF3wU5OdGT383fDTD340gixsTKTrejVhK_NeNFLrideMmVfncuEa7Da3IHNiKPWSc1YqxtHFeK7bRy02t6KXtBdyhOGcrFtLKYA-S6EmEB230OtaDt-Z4kL_UgyP0d6YHXlrn9SCN7r304CGtGPCIf3qE8U1vEEzF3W9QQhk7LLKdInZZZArtP2aRYnpxzSJeOvnIIueodMt8qaTpt-bLbDJ-HCdjybksTjw0fHmcGGlwAXuqLImTaQ_iJJqyuuIkh_arC-Qg_b50gfxDqlER22RFPjMr4j9HkXE02aKImfyTFAldo4iJvGmKDExnPaDIK1pxVZFEKv5VkRP04rUiPZTjUySXtvRTJZNuhanyE001qTKDus2qVMaocpmis5kdVqWW2ktV6aKeClVeUd9lVQxXVFleq0oCufpUeUz6aE2W0J0QTWrIEKUJ6OQSTUpp5A5NjPTDHs6oM0eTX_I1OVugSTlVHNfkEuWVanKIfFWa-F3SJOK2JpNJajUZStvva7KTip7zFvX1atK_T5N-Q3UZRIHDdJlA8bSSykbrUkFBwZzTzo90yaaSWF3OUK2uywPKWqxLDl2P1-VHsifq4qaOFF26qHatLr_RF-t1-ZJKU3Upp81ZunxNR_J1-Z5GDhlYVvPgvgxvt-YNmxiavH5DQlJa2pq09KR16WHJSamrwjatTg5LW52asTo1wRRhioo0RZrDI8wJX0X9D9umcPM" document-policy: include-js-call-stacks-in-crash-reports content-encoding: gzip server: ESF x-xss-protection: 0 x-content-type-options: nosniff set-cookie: NID=527=pwfqghXklZUgcoh0NkvRN6_lt5iHW3vbYq7-1l0SH9W2wOnqqcKy_bqle7tjn47pxqSegngFGG9Le2puV5jfDsFDPkzBfTyJQytzHq3c3HfJmZL25_LIZSIJohu40KnFzNkGPxzGy1hIVKpNdMdpIvr1dswUuHZEdInqJZ1kCWb3GYNzfY8C2ovfngvv-ExMNnCVNmTkL6G7W29Q; expires=Wed, 01-Jul-2026 00:49:42 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000