HTTP/2 200 cache-control: private, no-cache content-encoding: gzip content-security-policy: default-src 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev; base-uri 'self'; form-action 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev; frame-ancestors 'none'; img-src 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev secure.gravatar.com avatars.githubusercontent.com; object-src 'none'; script-src 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev; style-src 'self' www.bestpractices.dev.global.ssl.fastly.net bestpractices.coreinfrastructure.org.global.ssl.fastly.net bestpractices.coreinfrastructure.org www.bestpractices.dev content-type: text/html; charset=utf-8 feature-policy: fullscreen 'none'; geolocation 'none'; midi 'none';notifications 'none'; push 'none'; sync-xhr 'none'; microphone 'none';camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none';vibrate 'none'; payment 'none' nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1} permissions-policy: fullscreen=(), geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(), vibrate=(), payment=() referrer-policy: no-referrer-when-downgrade report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rUcehwlf1azKZmM7XMD%2BJrkOgTxG3z2nIzbH1RZ4jKI%3D\u0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74c\u0026ts=1766987688"}],"max_age":3600} reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=rUcehwlf1azKZmM7XMD%2BJrkOgTxG3z2nIzbH1RZ4jKI%3D&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&ts=1766987688" server: Heroku set-cookie: _BadgeApp_session=RXpQOHBVRk13VDdJTmVpTHBBWmNyZEJVdVI5Ym5mNkpYcDZ4WXl1eGZHcnZIaFVxdjNVRVZuVkFQR1BwZDZiaEc4ckt0dkd5MnF6Tk40eWp3SVM3NG50TnVEVS9GWXB4dWIxYzc1SVZYbFFxU1FQSGdrYUt1UFFZaTJPa0dVYVdHYW5hTnU1UTZLcGN5SlgrRFJzYUhnPT0tLURCQTBIaHBtMDdoL1FuWkNHeDBvT3c9PQ%3D%3D--590e7170182721d0ee6ba54fb3d95a6909494a53; path=/; secure; httponly via: 1.1 heroku-router, 1.1 varnish x-content-type-options: nosniff x-download-options: noopen x-frame-options: DENY x-permitted-cross-domain-policies: none x-request-id: 6b063013-6ee9-a504-9b84-634b9e36a810 x-runtime: 0.011917 x-xss-protection: 1; mode=block accept-ranges: bytes date: Mon, 29 Dec 2025 05:54:48 GMT x-served-by: cache-bom-vanm7210053-BOM x-cache: MISS x-cache-hits: 0 x-timer: S1766987688.095407,VS0,VE615 vary: Accept-Encoding strict-transport-security: max-age=300