HTTP/1.1 200 200 Server: ****** Date: Fri, 09 May 2025 17:26:45 GMT Content-Length: 0 Connection: keep-alive X-Frame-Options: SAMEORIGIN Frame-Options: SAMEORIGIN Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' STRICT-TRANSPORT-SECURITY: max-age=16070400; includeSubDomains X-Application-Context: application Set-Cookie: JSESSIONID=9C09C4C0532DB0D5C1EE097D0216A87D; Path=/; httponly;SameSite=Lax; HttpOnly X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block