HTTP/2 200 x-gu-frontend-git-commit-id: bf40f56063ca0ad3c42f168eaf3814695e183386 etag: W/"hash5315832430892732868" onion-location: https://www.guardian2zotagl6tmjucg3lrhxdk4dw3lhbqnkvvkywawy3oqfoprid.onion/index/subjects/a content-type: text/html; charset=UTF-8 accept-ranges: bytes date: Mon, 20 Jul 2026 19:55:54 GMT x-robots-tag: bingbot: noarchive set-cookie: gu_client_ab_tests=feast-recipe-nudge-v2:variant-1,growth-auxia-banner:variant; path=/; max-age=2592000 set-cookie: gu_v2_mvt_id=951; path=/; max-age=7776000 set-cookie: GU_mvt_id=253861; expires=Sun, 18 Oct 2026 19:55:54 GMT; path=/; domain=.theguardian.com; Secure x-timer: S1784577354.198581,VS0,VE374 strict-transport-security: max-age=63072000; includeSubDomains; preload x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-security-policy: upgrade-insecure-requests; default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: 'unsafe-inline'; frame-src https: data:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src 'self' https://assets.guim.co.uk https://pasteup.guim.co.uk https://interactive.guim.co.uk https://dashboard.ophan.co.uk https://cdn.braze.eu data:; connect-src https: wss: blob:; child-src https: blob:; object-src 'none'; base-uri 'none' referrer-policy: no-referrer-when-downgrade feature-policy: camera 'none'; microphone 'none'; midi 'none'; geolocation 'none' permissions-policy: camera=(), microphone=(), midi=(), geolocation=(), interest-cohort=(), clipboard-read=(), unload=() x-gu-edition: us cache-control: max-age=600, stale-while-revalidate=60, stale-if-error=864000, private age: 0 x-request-id: 4649bb96-a7d5-4472-82e2-b0c759a29603 vary: Accept-Encoding,User-Agent set-cookie: GU_geo_country=US; path=/; Secure alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 898356