HTTP/2 200 
last-modified: Mon, 20 Jul 2026 03:35:37 GMT
content-security-policy: default-src 'self'; script-src 'report-sample' 'self' 'wasm-unsafe-eval' assets.codepen.io production-assets.codepen.io https://js.stripe.com transcend-cdn.com 'sha256-XNBp89FG76amD8BqrJzyflxOF9PaWPqPqvJfKZPCv7M=' 'sha256-YCNoU9DNiinACbd8n6UPyB/8vj0kXvhkOni9/06SuYw=' 'sha256-PZjP7OR6mBEtnvXIZfCZ5PuOlxoDF1LDZL8aj8c42rw='; script-src-elem 'report-sample' 'self' 'wasm-unsafe-eval' assets.codepen.io production-assets.codepen.io https://js.stripe.com transcend-cdn.com 'sha256-XNBp89FG76amD8BqrJzyflxOF9PaWPqPqvJfKZPCv7M=' 'sha256-YCNoU9DNiinACbd8n6UPyB/8vj0kXvhkOni9/06SuYw=' 'sha256-PZjP7OR6mBEtnvXIZfCZ5PuOlxoDF1LDZL8aj8c42rw='; style-src 'report-sample' 'self' 'unsafe-inline' transcend-cdn.com; object-src 'none'; base-uri 'self'; connect-src 'self' developer.allizom.org bcd.developer.allizom.org bcd.developer.mozilla.org updates.developer.allizom.org updates.developer.mozilla.org https://incoming.telemetry.mozilla.org https://observatory-api.mdn.allizom.net https://observatory-api.mdn.mozilla.net telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com https://api.github.com/search/issues https://api.stripe.com; font-src 'self'; frame-src 'self' mdn.github.io *.mdnplay.dev *.mdnyalp.dev *.play.test.mdn.allizom.net https://v2.scrimba.com https://scrimba.com jsfiddle.net www.youtube-nocookie.com codepen.io survey.alchemer.com https://js.stripe.com; img-src 'self' data: *.githubusercontent.com *.gravatar.com mozillausercontent.com firefoxusercontent.com profile.stage.mozaws.net profile.accounts.firefox.com developer.mozilla.org mdn.dev wikipedia.org upload.wikimedia.org https://mdn.github.io/shared-assets/ https://mdn.dev/; manifest-src 'self'; media-src 'self' archive.org videos.cdn.mozilla.net https://mdn.github.io/shared-assets/; child-src 'self'; worker-src 'self';
x-guploader-uploadid: AKhXX7JM6kkgzf3yggXcqBy4Syt9nW6-Qvg9X4hEIFb8CL8HAPDWNRXI0EYaXdNCRkSliJmunaKVSUH-1pRhow
x-goog-hash: crc32c=YD55IA==, md5=tF6k8u3DtINNcR1A3n96wA==
strict-transport-security: max-age=63072000
x-goog-stored-content-length: 185586
x-goog-metageneration: 1
expires: Mon, 20 Jul 2026 20:25:15 GMT
x-frame-options: DENY
server: Google Frontend
x-goog-meta-goog-reserved-file-mtime: 1784517019
referrer-policy: strict-origin-when-cross-origin
content-type: text/html
etag: "b45ea4f2edc3b4834d711d40de7f7ac0"
x-goog-stored-content-encoding: identity
x-goog-generation: 1784518537674017
x-content-type-options: nosniff
cache-control: public, max-age=3600
via: 1.1 google, 1.1 varnish, 1.1 varnish, 1.1 varnish
x-cloud-trace-context: 82aa36f77afd7aa5d513babdf4b94f55
x-goog-storage-class: STANDARD
content-encoding: br
accept-ranges: bytes
age: 0
date: Mon, 20 Jul 2026 21:51:04 GMT
x-served-by: cache-bfi-kbfi7400090-BFI, cache-bfi-kbfi7400090-BFI, cache-bfi-kbfi7400090-BFI, cache-nyc-kteb1890070-NYC
x-cache: MISS, HIT, MISS
x-cache-hits: 0, 8, 0
x-timer: S1784584264.128856,VS0,VE63
vary: Accept-Encoding
content-length: 21063