-src 'none'; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; form-action 'self'; img-src 'self' blob: data: https://addons.mozilla.org/static-server/ https://addons.mozilla.org/user-media/ https://*.google-analytics.com https://*.googletagmanager.com; frame-src https://www.recaptcha.net/recaptcha/; media-src https://videos.cdn.mozilla.net; default-src 'none'; report-uri /__cspreport__
content-security-policy: default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; object-src 'none'; report-uri /__cspreport__
x-frame-options: DENY
x-frame-options: deny
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
cache-control: max-age=3600
x-xss-protection: 0
via: 1.1 google, 1.1 varnish, 1.1 varnish
content-encoding: br
accept-ranges: bytes
age: 1145
date: Tue, 11 Nov 2025 19:37:13 GMT
x-served-by: cache-bfi-kbfi7400064-BFI, cache-muc13957-MUC
x-cache: HIT, HIT
x-cache-hits: 16, 0
x-timer: S1762889834.546966,VS0,VE5
vary: origin, Accept-Encoding, X-Country-Code, Accept-Language
content-length: 948
X-Firefox-Spdy: h2