HTTP/2 200 date: Thu, 29 Jan 2026 01:00:12 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding server: Mastodon x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: same-origin vary: Accept, Accept-Language, Cookie link: ; rel=preload; as=script; type=text/javascript; integrity=sha256-4/bNy0mOgasP7+Bu2MJ4Cw89bdFHZAzFqChm/ajYQJw= cache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400 etag: W/"a431bc6af5fa929287353b2431a86514" content-security-policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://hcommons.social; img-src 'self' https: data: blob: https://hcommons.social; style-src 'self' https://hcommons.social 'nonce-J0zd2qUzB2MlCRCcwRhbdQ=='; media-src 'self' https: data: https://hcommons.social; frame-src 'self' https:; manifest-src 'self' https://hcommons.social; form-action 'self'; child-src 'self' blob: https://hcommons.social; worker-src 'self' blob: https://hcommons.social; connect-src 'self' data: blob: https://hcommons.social https://spaces.hcommons.social wss://hcommons.social; script-src 'self' https://hcommons.social 'wasm-unsafe-eval' x-request-id: f11b3b96-be69-4e7c-b1de-8f12224a51e2 x-runtime: 0.053922 strict-transport-security: max-age=63072000; includeSubDomains x-cached: EXPIRED content-encoding: gzip