HTTP/2 200 date: Sat, 17 Jan 2026 18:06:22 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding server: Mastodon x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: strict-origin-when-cross-origin vary: Accept, Accept-Language, Cookie cache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400 etag: W/"6e241fdfc615c66f631b850682476d4c" content-security-policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://wandering.shop; img-src 'self' data: blob: https://wandering.shop https://stockroom.wandering.shop; media-src 'self' data: https://wandering.shop https://stockroom.wandering.shop; manifest-src 'self' https://wandering.shop; form-action 'none'; child-src 'self' blob: https://wandering.shop; worker-src 'self' blob: https://wandering.shop; connect-src 'self' data: blob: https://wandering.shop https://stockroom.wandering.shop wss://wandering.shop; script-src 'self' https://wandering.shop 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://wandering.shop 'nonce-x1Uy4v33XFxAQ9nctr/feA==' x-request-id: ef604744-d118-4ec2-be27-891108ce44bf x-runtime: 0.027794 strict-transport-security: max-age=63072000; includeSubDomains strict-transport-security: max-age=31536000 content-encoding: gzip