HTTP/2 200 
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-security-policy: default-src 'self' http: https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: *.google.com *.gstatic.com; style-src 'self' 'unsafe-inline' https: http:; font-src 'self' data: https: http:; connect-src 'self' https: http:; base-uri 'self'; object-src 'none'; frame-ancestors 'none';
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-allow-origin: https://localhost:5000
content-encoding: gzip
x-cloud-trace-context: 0bf1ee386d38cb07c33ebacb2db095ce
date: Sun, 19 Jul 2026 07:18:59 GMT
server: Google Frontend
content-length: 27246
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000