HTTP/2 200 date: Fri, 26 Dec 2025 19:28:44 GMT content-type: text/html; charset=utf-8 content-encoding: gzip cf-ray: 9b42fb9d7933d3d4-BLR cf-cache-status: MISS cache-control: max-age=0, private, must-revalidate etag: W/"8fb43e07ad254f702e4e9ff8ba13b900" set-cookie: _gitlab_session=ef127f172f18e9e47c8e60401f01033c; path=/; secure; HttpOnly; SameSite=None set-cookie: __cf_bm=EXKvRgH.5s_Qb3.6f2ylc2IJyb63PXhjTFV05FCdER8-1766777324-1.0.1.1-neBJ_nz0dYYiMjnPoBA3F2OJCPcMORFcpaCgf_7Nt.0lXYRQgDT0nDPtFqUs34mpBzxJsf3ggTPuFcFxxsELhNQbxxxbKIcNEOjzN6W95L0; path=/; expires=Fri, 26-Dec-25 19:58:44 GMT; domain=.gitlab.com; HttpOnly; Secure; SameSite=None set-cookie: _cfuvid=YCgwn16iWqSS3tfY59IQYlYXeyn0p.pWGxd0KUIJl2o-1766777324213-0.0.1.1-604800000; path=/; domain=.gitlab.com; HttpOnly; Secure; SameSite=None strict-transport-security: max-age=31536000 vary: Accept, Accept-Encoding content-security-policy: base-uri 'self'; child-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ 'self' blob: data: https://embed.figma.com https://www.figma.com https://www.youtube.com; connect-src 'self' https://gitlab.com wss://gitlab.com https://sentry.gitlab.net https://new-sentry.gitlab.net https://customers.gitlab.com https://snowplow.trx.gitlab.net https://sourcegraph.com https://collector.prd-278964.gl-product-analytics.com https://analytics.gitlab.com snowplowprd.trx.gitlab.net; default-src 'self'; font-src 'self'; form-action 'self' https: http:; frame-ancestors 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ https://embed.figma.com https://www.figma.com https://www.youtube.com; img-src 'self' data: blob: http: https:; manifest-src 'self'; media-src 'self' data: blob: http: https:; object-src 'none'; report-uri https://new-sentry.gitlab.net/api/4/security/?sentry_key=f5573e26de8f4293b285e556c35dfd6e&sentry_environment=gprd; script-src 'strict-dynamic' 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/ https://apis.google.com https://*.zuora.com/apps/PublicHostedPageLite.do 'nonce-w4w28yVX2ZRZzUyx4Lb8Zw=='; style-src 'self' 'unsafe-inline'; worker-src 'self' https://gitlab.com/assets/ blob: data: gitlab-lb: haproxy-main-10-lb-gprd gitlab-sv: web-gke-us-east1-b nel: {"max_age": 0} permissions-policy: interest-cohort=() ratelimit-limit: 500 ratelimit-name: throttle_unauthenticated_web ratelimit-observed: 1 ratelimit-remaining: 499 ratelimit-reset: 1766777340 referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-gitlab-meta: {"correlation_id":"9b42fb9d940cd3d4-ATL","version":"1"} x-permitted-cross-domain-policies: none x-request-id: 9b42fb9d940cd3d4-ATL x-runtime: 0.202594 x-ua-compatible: IE=edge x-xss-protection: 1; mode=block server: cloudflare