HTTP/2 200
connection-allowlist: (response-origin "https://*" "http://cdn.example" "ws://chat.example" "https://api.example" https://b.example "cdn.example"); redirects=allow; webrtc=allow, ("https://c.example")
connection-allowlist-report-only: response-origin; report-to=endpoint
no-vary-search: params=("a"
supports-loading-mode: credentialed-prerender, prerender
speculation-rules: "/rules/prefetch,prerender.json", /rules/prerender.json
content-security-policy: default-src 'none'; font-src 'self'; object-src 'self'; require-trusted-types-for 'script'; trusted-types 'none'; base-uri 'self'; child-src github.githubassets.com; connect-src 'self' uploads.github.com; form-action 'self' github.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com; img-src 'self' github.githubassets.com *humblecspbroadtest.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/; script-src github.githubassets.com 'strict-dynamic' 'sha256-Ym90Y2hlZA==' 'nonce-Ym90Y2hlZA==' nonce-99999; style-src github.githubassets.com; worker-src github.githubassets.com
Permissions-Policy: camera=*=*, microphone=*
set-cookie: __Host-Http-humble-test=34d8g; Secure; HttpOnly; Path=/humble
strict-transport-security: max-age=0
