HTTP/2 200 content-type: text/html; charset=utf-8 vary: Accept-Encoding content-security-policy: default-src 'self' http: https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: *.google.com *.gstatic.com; style-src 'self' 'unsafe-inline' https: http:; font-src 'self' data: https: http:; connect-src 'self' https: http:; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; x-content-type-options: nosniff x-frame-options: DENY x-xss-protection: 1; mode=block access-control-allow-origin: https://localhost:5000 x-cloud-trace-context: 6291f826ce1a93084fb36dde1b0d4971 content-length: 441662 date: Sun, 19 Jul 2026 13:12:10 GMT server: Google Frontend alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000