HTTP/2 200 server: nginx date: Sun, 18 Jan 2026 02:11:43 GMT content-type: text/html; charset=utf-8 x-powered-by: Express strict-transport-security: max-age=31536000; includeSubDomains; preload referrer-policy: same-origin content-security-policy: default-src 'none';base-uri 'self';connect-src 'self' wss://md.archlinux.org https://vimeo.com/api/v2/video/;font-src 'self';manifest-src 'self';frame-src 'self' https://player.vimeo.com https://www.youtube.com https://gist.github.com;img-src * data:;script-src https://md.archlinux.org/build/ https://md.archlinux.org/js/ https://md.archlinux.org/config 'unsafe-inline' 'nonce-3beedb49-2e9e-423a-bd20-70a3731bafc2' 'sha256-81acLZNZISnyGYZrSuoYhpzwDTTxi7vC1YM4uNxqWaM=';style-src https://md.archlinux.org/build/ https://md.archlinux.org/css/ 'unsafe-inline';object-src *;form-action 'self';media-src *;frame-ancestors 'self' hedgedoc-version: 1.10.5 etag: W/"38ce-W4leBLfqIYuf+4ndkiSnE+u5SpA" set-cookie: connect.sid=s%3A-3SESW5VONi2KzYkcJ7w9h5lejx5i4PQ.llX%2B%2B%2BiBuQmkxfQvzyTPPQBFBSJdFkseUy75pTU9dSg; Path=/; Expires=Tue, 17 Feb 2026 02:11:43 GMT; HttpOnly; Secure; SameSite=Lax vary: Accept-Encoding content-encoding: gzip strict-transport-security: max-age=31536000; includeSubdomains; preload