Oculus.com - Creator.oculus.com

vary: Accept-Encoding
content-encoding: br
set-cookie: locale=en_US; expires=Sat, 06-Dec-2025 07:40:02 GMT; Max-Age=604800; path=/; domain=.oculus.com; secure
reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.oculus.com/ajax/browser_error_reports/?device_level=unknown&brsid=7578048896008711332&cpp=C3&cv=1030428034&st=1764402002482", permissions_policy="https://www.oculus.com/ajax/browser_error_reports/"
report-to: {"max_age":2592000,"endpoints":[{"url":"https://www.facebook.com/browser_reporting/coop/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https://www.facebook.com/browser_reporting/coep/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https://www.oculus.com/ajax/browser_error_reports/?device_level=unknown&brsid=7578048896008711332&cpp=C3&cv=1030428034&st=1764402002482"}]}, {"max_age":21600,"endpoints":[{"url":"https://www.oculus.com/ajax/browser_error_reports/"}],"group":"permissions_policy"}
content-security-policy: default-src blob: oculus.com *.oculus.com fbthirdpartypixel.com *.fbthirdpartypixel.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com oculuscdn.com *.oculuscdn.com oculusvr.com *.oculusvr.com www.meta.com *.www.meta.com facebook.com *.facebook.com;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-6hyY0i4D' blob: 'self' *.oculus.com static.oculuscdn.com forums.oculusvr.com 'unsafe-eval' gw.conversionsapigateway.com;style-src data: blob: 'unsafe-inline' *.oculus.com *.facebook.com oculus.com fbthirdpartypixel.com *.fbthirdpartypixel.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com oculuscdn.com *.oculuscdn.com oculusvr.com *.oculusvr.com www.meta.com *.www.meta.com facebook.com;connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://edge-chat-latest.oculus.com wss://edge-chat.oculus.com edge-chat.oculus.com edge-chat-latest.oculus.com gateway.oculus.com wss://gateway.oculus.com *.oculus.com *.oculuscdn.com gw.conversionsapigateway.com;font-src *.oculus.com data: *.fbcdn.net *.facebook.com *.oculuscdn.com;img-src *.oculus.com *.fbcdn.net *.fbsbx.com *.facebook.com *.fbthirdpartypixel.com *.oculuscdn.com data: blob: https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src data: blob: oculus.com *.oculus.com fbthirdpartypixel.com *.fbthirdpartypixel.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com oculuscdn.com *.oculuscdn.com oculusvr.com *.oculusvr.com www.meta.com *.www.meta.com facebook.com *.facebook.com;child-src data: blob: oculus.com *.oculus.com fbthirdpartypixel.com *.fbthirdpartypixel.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com oculuscdn.com *.oculuscdn.com oculusvr.com *.oculusvr.com www.meta.com *.www.meta.com facebook.com *.facebook.com;frame-src *.oculus.com *.fbthirdpartypixel.com fbthirdpartypixel.com *.facebook.com *.fbsbx.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ centinelapi.cardinalcommerce.com centinelapistag.cardinalcommerce.com client.cardinaltrusted.com cas.client.cardinaltrusted.com;manifest-src data: blob: oculus.com *.oculus.com fbthirdpartypixel.com *.fbthirdpartypixel.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com oculuscdn.com *.oculuscdn.com oculusvr.com *.oculusvr.com www.meta.com *.www.meta.com facebook.com *.facebook.com;object-src data: blob: oculus.com *.oculus.com fbthirdpartypixel.com *.fbthirdpartypixel.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com oculuscdn.com *.oculuscdn.com oculusvr.com *.oculusvr.com www.meta.com *.www.meta.com facebook.com *.facebook.com;worker-src data: blob: oculus.com *.oculus.com fbthirdpartypixel.com *.fbthirdpartypixel.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com oculuscdn.com *.oculuscdn.com oculusvr.com *.oculusvr.com www.meta.com *.www.meta.com facebook.com *.facebook.com;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';
x-frame-options: DENY
document-policy: force-load-at-top
document-policy: include-js-call-stacks-in-crash-reports
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: same-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
origin-agent-cluster: ?1
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-type: text/html; charset="utf-8"
x-fb-debug: oS+9fOpZ6Cbj/zhdx5SXQBZKI0VwtPypH7yZinXjvGxc20lxU33hX3ipWWqqkmuMa/iUPnfKHt+K5ha7HAT8+w==
date: Sat, 29 Nov 2025 07:40:03 GMT