| server | nginx |
| date | Mon, 01 Dec 2025 14:28:55 GMT |
| content-type | text/html; charset=UTF-8 |
| content-length | 12195 |
| access-control-allow-methods | GET,POST |
| access-control-allow-headers | Content-Type, Authorization |
| content-security-policy | upgrade-insecure-requests; |
| cross-origin-embedder-policy | unsafe-none; report-to='default' |
| cross-origin-embedder-policy-report-only | unsafe-none; report-to='default' |
| cross-origin-opener-policy | unsafe-none |
| cross-origin-opener-policy-report-only | unsafe-none; report-to='default' |
| cross-origin-resource-policy | cross-origin |
| permissions-policy | accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), gamepad=(), serial=() |
| referrer-policy | strict-origin-when-cross-origin |
| strict-transport-security | max-age=63072000 |
| x-content-security-policy | default-src 'self'; img-src *; media-src * data:; |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| x-permitted-cross-domain-policies | none |
| link | <https://openpathcollective.org/wp-json/>; rel="https://api.w.org/", <https://openpathcollective.org/wp-json/wp/v2/pages/195518>; rel="alternate"; type="application/json", <https://openpathcollective.org/>; rel=shortlink |
| vary | Accept-Encoding |
| content-encoding | gzip |
| age | 6041 |
| x-cache | HIT |
| accept-ranges | bytes |
| statuscode | 200 |
| http_version | HTTP/2 |
(Nice to have)