HTTP/1.1 200 OK server: nginx date: Mon, 29 Dec 2025 15:07:32 GMT content-type: text/html; charset=utf-8 transfer-encoding: chunked vary: Accept-Encoding x-frame-options: SAMEORIGIN x-xss-protection: 0 x-content-type-options: nosniff x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin x-discourse-route: list/latest vary: Accept cross-origin-opener-policy: same-origin-allow-popups cache-control: no-cache, no-store content-security-policy: upgrade-insecure-requests; base-uri 'self'; object-src 'none'; script-src 'nonce-g97MEDERB1kgnnsmCAjqoFufB' 'strict-dynamic'; manifest-src 'self' x-discourse-cached: skip access-control-allow-origin: * access-control-allow-headers: Content-Type, Cache-Control, X-Requested-With, X-CSRF-Token, Discourse-Present, User-Api-Key, User-Api-Client-Id, Authorization access-control-allow-credentials: true access-control-allow-methods: POST, PUT, GET, OPTIONS, DELETE access-control-max-age: 7200 x-request-id: f8560c66-c29c-4199-a0a4-d655f3c5a61c x-runtime: 0.105184 x-discourse-trackview: 1 content-encoding: gzip set-cookie: e310b7d0c595da0cc51857f5aece6461=d2383c7bb232300fd130c1e171fb3dd4; path=/; HttpOnly; Secure; SameSite=None