HTTP/2 200 date: Fri, 26 Dec 2025 20:15:30 GMT content-type: text/html; charset=utf-8 content-encoding: gzip cf-ray: 9b43401eadf7c537-BLR cf-cache-status: MISS cache-control: max-age=0, private, must-revalidate etag: W/"1dd97c839be97c03ea0e63775226939d" set-cookie: _gitlab_session=72d95a51e183171c5f7fd342b494cf28; path=/; secure; HttpOnly; SameSite=None set-cookie: __cf_bm=sU38at7.vsKQyH2AO66AeMnBVoMSLyK_fN3FurrCBtc-1766780130-1.0.1.1-lL6TtAYD8L6mPLutvZZKg.qSBumKI5sNw4NzFv0PilXKuQA6rA.D8UMJS7dFktk2GtYEDB.EtceMd6lIOgb.6O9CXq6EqokdbsQAEzSvCeY; path=/; expires=Fri, 26-Dec-25 20:45:30 GMT; domain=.gitlab.com; HttpOnly; Secure; SameSite=None set-cookie: _cfuvid=27b29hJ2ChqwlsPMimUQSDKSK8gHkgQgFlQGDxNj2jQ-1766780130028-0.0.1.1-604800000; path=/; domain=.gitlab.com; HttpOnly; Secure; SameSite=None strict-transport-security: max-age=31536000 vary: Accept, Accept-Encoding content-security-policy: base-uri 'self'; child-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ 'self' blob: data: https://embed.figma.com https://www.figma.com https://www.youtube.com; connect-src 'self' https://gitlab.com wss://gitlab.com https://sentry.gitlab.net https://new-sentry.gitlab.net https://customers.gitlab.com https://snowplow.trx.gitlab.net https://sourcegraph.com https://collector.prd-278964.gl-product-analytics.com https://analytics.gitlab.com snowplowprd.trx.gitlab.net; default-src 'self'; font-src 'self'; form-action 'self' https: http:; frame-ancestors 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ https://embed.figma.com https://www.figma.com https://www.youtube.com; img-src 'self' data: blob: http: https:; manifest-src 'self'; media-src 'self' data: blob: http: https:; object-src 'none'; report-uri https://new-sentry.gitlab.net/api/4/security/?sentry_key=f5573e26de8f4293b285e556c35dfd6e&sentry_environment=gprd; script-src 'strict-dynamic' 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/ https://apis.google.com https://*.zuora.com/apps/PublicHostedPageLite.do 'nonce-+mCxjD0I7o4Z7DJcJFhEPA=='; style-src 'self' 'unsafe-inline'; worker-src 'self' https://gitlab.com/assets/ blob: data: gitlab-lb: haproxy-main-36-lb-gprd gitlab-sv: web-gke-us-east1-d nel: {"max_age": 0} permissions-policy: interest-cohort=() ratelimit-limit: 500 ratelimit-name: throttle_unauthenticated_web ratelimit-observed: 1 ratelimit-remaining: 499 ratelimit-reset: 1766780160 referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-gitlab-meta: {"correlation_id":"9b43401ec501c537-ATL","version":"1"} x-permitted-cross-domain-policies: none x-request-id: 9b43401ec501c537-ATL x-runtime: 0.079873 x-ua-compatible: IE=edge x-xss-protection: 1; mode=block server: cloudflare