Headers of http://staging.shyamsteel.com/shop

HTTP/1.1 301 Moved Permanently
Date
Thu, 13 Feb 2025 05:54:25 GMT
Server
Apache
X-XSS-Protection
1; mode=block
X-Content-Type-Options
nosniff
Referrer-Policy
strict-origin-when-cross-origin
Expect-CT
max-age=7776000, enforce
Content-Security-Policy
report-uri https://staging.shyamsteel.com
X-Frame-Options
SAMEORIGIN
Permissions-Policy
accelerometer=(), autoplay=(), camera=(), fullscreen=*, geolocation=(self), gyroscope=(), microphone=$
Location
http://staging.shyamsteel.com/shop/
Content-Length
243
Connection
close
Content-Type
text/html; charset=iso-8859-1
HTTP/1.1 301 Moved Permanently
Date
Thu, 13 Feb 2025 05:54:26 GMT
Server
Apache
X-XSS-Protection
1; mode=block
X-Content-Type-Options
nosniff
Referrer-Policy
strict-origin-when-cross-origin
Expect-CT
max-age=7776000, enforce
Content-Security-Policy
report-uri https://staging.shyamsteel.com
X-Frame-Options
SAMEORIGIN
Permissions-Policy
accelerometer=(), autoplay=(), camera=(), fullscreen=*, geolocation=(self), gyroscope=(), microphone=$
Location
https://staging.shyamsteel.com/shop/
Content-Length
244
Connection
close
Content-Type
text/html; charset=iso-8859-1
HTTP/1.1 200 OK
Date
Thu, 13 Feb 2025 05:54:26 GMT
Server
Apache
Strict-Transport-Security
max-age=63072000; includeSubDomains; preload
X-Frame-Options
SAMEORIGIN
Content-Security-Policy
report-uri https://staging.shyamsteel.com
X-Content-Type-Options
nosniff
Referrer-Policy
strict-origin-when-cross-origin
X-XSS-Protection
1; mode=block
Expect-CT
max-age=7776000, enforce
Permissions-Policy
accelerometer=(), autoplay=(), camera=(), fullscreen=*, geolocation=(self), gyroscope=(), microphone=$
X-XSS-Protection
1; mode=block
Expect-CT
max-age=7776000, enforce
Access-Control-Allow-Origin
null
Access-Control-Allow-Methods
GET,PUT,POST,DELETE
Access-Control-Allow-Headers
Content-Type, Authorization
X-Content-Security-Policy
img-src *; media-src * data:;
X-Content-Type-Options
nosniff
Content-Security-Policy
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none';
Referrer-Policy
strict-origin-when-cross-origin
Cross-Origin-Embedder-Policy-Report-Only
unsafe-none; report-to="default"
Cross-Origin-Embedder-Policy
unsafe-none; report-to="default"
Cross-Origin-Opener-Policy-Report-Only
same-origin; report-to="default"
Cross-Origin-Opener-Policy
same-origin-allow-popups; report-to="default"
Cross-Origin-Resource-Policy
cross-origin
X-Frame-Options
SAMEORIGIN
Permissions-Policy
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), document-domain=(), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), gamepad=(), serial=(), window-placement=()
Feature-Policy
display-capture 'self'
X-Permitted-Cross-Domain-Policies
none
Strict-Transport-Security
max-age=63072000; includeSubDomains; preload
Link
; rel="https://api.w.org/"
Link
; rel=shortlink
Cache-Control
no-cache, no-store, must-revalidate
Pragma
no-cache
Set-Cookie
PHPSESSID=ub7rcmeo4k2ecdidg2ot3b4cu8; path=/; secure; HttpOnly
Expires
0
Connection
close
Transfer-Encoding
chunked
Content-Type
text/html; charset=UTF-8