HTTP/2 200 date: Fri, 16 Jan 2026 19:49:39 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding server: Mastodon x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: same-origin vary: Accept, Accept-Language, Cookie, Origin cache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=3600 etag: W/"eed6851ac43e37e6696d4380e1359377" content-security-policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://mastodon.world; img-src 'self' data: blob: https://mastodon.world https://s3.eu-central-2.wasabisys.com; media-src 'self' data: https://mastodon.world https://s3.eu-central-2.wasabisys.com; manifest-src 'self' https://mastodon.world; form-action 'none'; child-src 'self' blob: https://mastodon.world; worker-src 'self' blob: https://mastodon.world; connect-src 'self' data: blob: https://mastodon.world https://s3.eu-central-2.wasabisys.com wss://mastodon.world; script-src 'self' https://mastodon.world 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://mastodon.world 'nonce-6unFoeyAUhffmSgyukSzwg==' x-request-id: 33768623-707c-4d47-99d1-3aa31d130415 x-runtime: 0.032115 strict-transport-security: max-age=63072000; includeSubDomains x-cached: MISS strict-transport-security: max-age=31536000 content-encoding: gzip