HTTP/2 200 content-type: text/html; charset=utf-8 vary: Accept-Encoding content-security-policy: default-src 'self' http: https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: *.google.com *.gstatic.com; style-src 'self' 'unsafe-inline' https: http:; font-src 'self' data: https: http:; connect-src 'self' https: http:; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; x-content-type-options: nosniff x-frame-options: DENY x-xss-protection: 1; mode=block access-control-allow-origin: https://localhost:5000 x-cloud-trace-context: 89a12855f4da44cb06b79cf77573afb3 content-length: 441662 date: Sun, 19 Jul 2026 13:30:44 GMT server: Google Frontend alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000