HTTP/1.1 200 OK
Server: nginx/1.15.12
Date: Thu, 06 Jun 2019 08:39:17 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
X-Diaspora-Version: 0.7.99.0-pb17a4541
X-Git-Update: 2019-05-13 21:15:31 +0000
X-Git-Revision: b17a4541542eddf28d34de716b9d9ae28525d3da
ETag: W/"fbe30a8206b274bfd9ce5c516bfc2981"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _diaspora_session=RDNnT1RBZ1JpZFNIQUlrUlppeFFWaURYWDY1cGd3R0RRWGRGZXFNRVpCckJzTkdlS1U3ZDJya0pqZjlndGJOb3Bhd00xS3ZYSDl0R0k4TEt2NUxIZGo3ZWlULzRkdEFqVHNMWE9HWnRtekRkY2F3Nk1lUzZSOUlWVllOa0dBZFNJTEtiQTNLa2hqWis3N2R5dDl2aHlKOHVLZXRIaWp1bVVrZEtVOHl3cUl4T2hPb1RpQUZDTE11SzJGdHNXcUk0UThkRlFNYjVEVnkydWMyNy9rdTJmQT09LS1pTjMxQTlsdFNVLy95b3ZlSFpEdDZnPT0%3D--d19794b3d090345d9247922cf91142d4930e1e8e; path=/; HttpOnly; secure; SameSite=Lax
X-Request-Id: 412f7393-df9a-47c3-ba48-46f39d362adb
X-Runtime: 0.021085
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'none'; connect-src 'self' *.geraspora.de embedr.flickr.com geo.query.yahoo.com nominatim.openstreetmap.org api.github.com; font-src 'self'; form-action 'self' platform.twitter.com syndication.twitter.com; frame-ancestors 'self'; frame-src 'self' blob: www.youtube.com w.soundcloud.com twitter.com platform.twitter.com syndication.twitter.com player.vimeo.com www.mixcloud.com www.dailymotion.com media.ccc.de bandcamp.com www.instagram.com; img-src data: blob: *; manifest-src 'self'; media-src https:; script-src 'self' blob: 'unsafe-eval' *.geraspora.de platform.twitter.com cdn.syndication.twimg.com widgets.flickr.com embedr.flickr.com www.instagram.com 'unsafe-inline' 'nonce-Gh9n7gHm4XInOz0uNPpBlg1d4CqxEWzogSERMNnADbg='; style-src 'self' 'unsafe-inline' *.geraspora.de platform.twitter.com *.twimg.com; report-uri /csp_violation_reports
Vary: Accept-Encoding
X-Foo: Hey! Get out of my header!