Headers of https://madrid.cntait.org

HTTP/1.1 200 OK
Server
nginx
Date
Mon, 20 Apr 2026 20:31:31 GMT
Content-Type
text/html; charset=UTF-8
Transfer-Encoding
chunked
Connection
close
X-Powered-By
PHP/8.3.30
Expires
Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control
no-store, no-cache, must-revalidate
Pragma
no-cache
Access-Control-Allow-Methods
GET,POST
Access-Control-Allow-Headers
Content-Type, Authorization
Content-Security-Policy
upgrade-insecure-requests;
Cross-Origin-Embedder-Policy
unsafe-none; report-to='default'
Cross-Origin-Embedder-Policy-Report-Only
unsafe-none; report-to='default'
Cross-Origin-Opener-Policy
unsafe-none
Cross-Origin-Opener-Policy-Report-Only
unsafe-none; report-to='default'
Cross-Origin-Resource-Policy
cross-origin
Permissions-Policy
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
Strict-Transport-Security
max-age=31536000; includeSubDomains; preload
X-Content-Security-Policy
default-src 'self'; img-src *; media-src * data:;
X-Permitted-Cross-Domain-Policies
none
Link
; rel="https://api.w.org/", ; rel="alternate"; title="JSON"; type="application/json", ; rel=shortlink
X-Content-Type-Options
nosniff
X-Frame-Options
SAMEORIGIN
Referrer-Policy
strict-origin-when-cross-origin
Set-Cookie
PHPSESSID=jpnhbbo1i6r6dej1mgn9qihh5p; path=/; SameSite=Lax
Vary
Accept-Encoding
Access-Control-Allow-Methods
GET,POST
Access-Control-Allow-Headers
Content-Type, Authorization
Content-Security-Policy
upgrade-insecure-requests;
Cross-Origin-Embedder-Policy
unsafe-none; report-to='default'
Cross-Origin-Embedder-Policy-Report-Only
unsafe-none; report-to='default'
Cross-Origin-Opener-Policy
unsafe-none
Cross-Origin-Opener-Policy-Report-Only
unsafe-none; report-to='default'
Cross-Origin-Resource-Policy
cross-origin
Permissions-Policy
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
Referrer-Policy
strict-origin-when-cross-origin
Strict-Transport-Security
max-age=31536000; includeSubDomains; preload
X-Content-Security-Policy
default-src 'self'; img-src *; media-src * data:;
X-Permitted-Cross-Domain-Policies
none
X-Cache-Status
MISS
X-Powered-By
PleskLin