Museumofflight.org - Digitalcollections.museumofflight.org

date: Thu, 17 Jul 2025 08:46:03 GMT
content-type: text/html; charset=utf-8
server: nginx
permissions-policy: accelerometer=(self), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(self "https://*.vimeo.com" "https://*.youtube.com"), geolocation=(self), gyroscope=(self "https://maps.google.com"), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self "https://*.vimeo.com" "https://*.youtube.com"), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
content-security-policy: default-src 'self'; upgrade-insecure-requests; img-src 'self' data: https:; font-src 'self' fonts.gstatic.com fonts.googleapis.com use.fontawesome.com use.typekit.net; base-uri 'self'; object-src 'none'; style-src 'self' 'unsafe-inline' https:; connect-src 'self' stats.g.doubleclick.net maps.googleapis.com www.paypal.com www.sandbox.paypal.com analytics.google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com; frame-src 'self' https:; script-src 'self' 'report-sample' 'strict-dynamic' 'unsafe-inline' https: 'nonce-c621d0ce724f3c7c7e275c7b25975a0d'; report-uri https://e336sfth.uriports.com/reports/report; report-to default;
set-cookie: Analytics_User_level=Guest; path=/; secure
set-cookie: RECOLLECT=v5vqjg73r9thjv5fsogtclu392; expires=Thu, 17-Jul-2025 09:46:03 GMT; Max-Age=3600; path=/; secure; HttpOnly
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 17 Jul 2025 08:46:03 GMT
cache-control: no-store, no-cache, must-revalidate
cache-control: post-check=0, pre-check=0
pragma: no-cache
set-cookie: Analytics_User_level=Guest; path=/; secure
report-to: {"group":"default","max_age":259200,"endpoints":[{"url":"https://e336sfth.uriports.com/reports"}],"include_subdomains":true}
reporting-endpoints: default="https://e336sfth.uriports.com/reports"
nel: {"report_to":"default","max_age":259200,"include_subdomains":true,"failure_fraction":0.5}
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
referrer-policy: no-referrer, strict-origin-when-cross-origin
content-encoding: br