Headers of https://www.nomitek.com.mx/

HTTP/1.1 200 OK
Date
Mon, 27 Feb 2023 17:30:18 GMT
Server
Apache
X-XSS-Protection
1; mode=block
Expect-CT
max-age=7776000, enforce
Access-Control-Allow-Origin
null
Access-Control-Allow-Methods
GET,PUT,POST,DELETE
Access-Control-Allow-Headers
Content-Type, Authorization
X-Content-Security-Policy
default-src 'self'; img-src *; media-src * data:;
X-Content-Type-Options
nosniff
Content-Security-Policy
report-uri https://www.nomitek.com.mx
Referrer-Policy
strict-origin-when-cross-origin
Cross-Origin-Embedder-Policy-Report-Only
unsafe-none; report-to="default"
Cross-Origin-Embedder-Policy
unsafe-none; report-to="default"
Cross-Origin-Opener-Policy-Report-Only
same-origin; report-to="default"
Cross-Origin-Opener-Policy
same-origin-allow-popups; report-to="default"
Cross-Origin-Resource-Policy
cross-origin
X-Frame-Options
SAMEORIGIN
Permissions-Policy
accelerometer=(), autoplay=(), camera=(), fullscreen=*, geolocation=(self), gyroscope=(), microphone=(), payment=*
Feature-Policy
display-capture 'self'
X-Permitted-Cross-Domain-Policies
none
Strict-Transport-Security
max-age=63072000; includeSubDomains; preload
Link
; rel="https://api.w.org/", ; rel="alternate"; type="application/json", ; rel=shortlink
Upgrade
h2,h2c
Connection
Upgrade, close
Vary
Accept-Encoding
Accept-Ranges
none
Access-Control-Allow-Origin
null
Access-Control-Allow-Methods
GET,PUT,POST,DELETE
Access-Control-Allow-Headers
Content-Type, Authorization
X-Content-Security-Policy
img-src *; media-src * data:;
X-Permitted-Cross-Domain-Policies
none
Content-Type
text/html; charset=UTF-8