HTTP/2 302 cache-control: private, no-store content-encoding: gzip content-security-policy: default-src 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev; base-uri 'self'; form-action 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev; frame-ancestors 'none'; img-src 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev secure.gravatar.com avatars.githubusercontent.com; object-src 'none'; script-src 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev; style-src 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev content-type: text/html; charset=utf-8 location: https://www.bestpractices.dev/en nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1} referrer-policy: no-referrer-when-downgrade report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=sljeuxuLdRJmlbqP1dYDNCoUCFr3GoLV57K%2BT3AbNPM%3D\u0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74c\u0026ts=1766716385"}],"max_age":3600} reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=sljeuxuLdRJmlbqP1dYDNCoUCFr3GoLV57K%2BT3AbNPM%3D&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&ts=1766716385" server: Heroku via: 1.1 heroku-router, 1.1 varnish x-content-type-options: nosniff x-download-options: noopen x-frame-options: DENY x-permitted-cross-domain-policies: none x-request-id: 47bfcd92-20e7-faf6-3bac-8c5146d7e256 x-runtime: 0.003670 x-xss-protection: 1; mode=block accept-ranges: bytes date: Fri, 26 Dec 2025 02:33:06 GMT x-served-by: cache-bom-vanm7210088-BOM x-cache: MISS x-cache-hits: 0 x-timer: S1766716385.449942,VS0,VE645 vary: Accept-Encoding strict-transport-security: max-age=300 content-length: 20 HTTP/2 200 cache-control: private, no-cache content-encoding: gzip content-security-policy: default-src 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev; base-uri 'self'; form-action 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev; frame-ancestors 'none'; img-src 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev secure.gravatar.com avatars.githubusercontent.com; object-src 'none'; script-src 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev; style-src 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev content-type: text/html; charset=utf-8 feature-policy: fullscreen 'none'; geolocation 'none'; midi 'none';notifications 'none'; push 'none'; sync-xhr 'none'; microphone 'none';camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none';vibrate 'none'; payment 'none' nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1} permissions-policy: fullscreen=(), geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(), vibrate=(), payment=() referrer-policy: no-referrer-when-downgrade report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=7ftb1TItvEJ1L79tCwvgFOpweqgr75Ez7elrgOP7gWg%3D\u0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74c\u0026ts=1766716386"}],"max_age":3600} reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=7ftb1TItvEJ1L79tCwvgFOpweqgr75Ez7elrgOP7gWg%3D&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&ts=1766716386" server: Heroku set-cookie: _BadgeApp_session=QTdKeXZSUHAzbm9xYStTQkdEWWRzNFJCMHp2TDlHVHdOOG9WdG1ZQ2RHQm1JUmVGUWdkKzMvMlFEOG1BeUVOdm1PWGdmcFVnWjR1YWVoQXJyZFVaQ3FDK3pkaXFjSEYvVkhRQnZ3VnVRdGNHSCtJY29raWd3VU03dC9mNnprTlVNMml3VHU1ZnNPU0RkbGlDb0xQTk5RPT0tLUZudkRxdmVKMlU0UkpyL1IrOVhRZUE9PQ%3D%3D--250eeeedbfb932f3c8181ee9cb97663ee1363255; path=/; secure; httponly via: 1.1 heroku-router, 1.1 varnish x-content-type-options: nosniff x-download-options: noopen x-frame-options: DENY x-permitted-cross-domain-policies: none x-request-id: 3b6777fa-0860-7229-d295-9a05bc8d2f9a x-runtime: 0.006959 x-xss-protection: 1; mode=block accept-ranges: bytes date: Fri, 26 Dec 2025 02:33:06 GMT x-served-by: cache-bom-vanm7210088-BOM x-cache: MISS x-cache-hits: 0 x-timer: S1766716386.108867,VS0,VE644 vary: Accept-Encoding strict-transport-security: max-age=300