HTTP/2 200 
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-security-policy: default-src 'self' http: https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: *.google.com *.gstatic.com; style-src 'self' 'unsafe-inline' https: http:; font-src 'self' data: https: http:; connect-src 'self' https: http:; base-uri 'self'; object-src 'none'; frame-ancestors 'none';
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-allow-origin: https://localhost:5000
content-encoding: gzip
x-cloud-trace-context: 8f4c9aea42ba62a1d43df6387d5b9f94
date: Sun, 19 Jul 2026 20:21:25 GMT
server: Google Frontend
content-length: 106249
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000