Hup.fi

document-policy: js-profiling
x-dns-prefetch-control: on
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=("https://www.youtube-nocookie.com/"), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
referrer-policy: same-origin
report-to: {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://o630684.ingest.us.sentry.io/api/4506066781339648/security/?sentry_key=779108af5c8aa3ea8cf89d2d4d6e71e1"}],"include_subdomains":true}
reporting-endpoints: csp-endpoint="https://o630684.ingest.us.sentry.io/api/4506066781339648/security/?sentry_key=779108af5c8aa3ea8cf89d2d4d6e71e1"
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://storage.googleapis.com/operas/ https://hypothes.is/embed.js https://cdn.hypothes.is/hypothesis/ https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/; style-src 'self' blob: 'unsafe-inline' https://storage.googleapis.com/operas/ https://cdn.hypothes.is/hypothesis/; font-src 'self' data: blob:; img-src 'self' data: blob: https://storage.googleapis.com/press-uh-p-hup-front/ https://service-rua.s3.amazonaws.com/hup/files/media/ https://storage.googleapis.com/cstation/uploads/cms-public/ https://i.vimeocdn.com/; connect-src 'self' https://widget.doabooks.org/prism/ https://metrics-api.operas-eu.org/ https://o630684.ingest.sentry.io https://o630684.ingest.us.sentry.io https://www.google.com/recaptcha/; frame-src 'self' https://mastofeed.com/ https://www.youtube.com/ https://www.youtube-nocookie.com/ https://hypothes.is/ https://www.google.com/ https://player.vimeo.com/; worker-src 'self' blob:; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri https://o630684.ingest.us.sentry.io/api/4506066781339648/security/?sentry_key=779108af5c8aa3ea8cf89d2d4d6e71e1; report-to csp-endpoint
set-cookie: NEXT_LOCALE=en; Path=/; SameSite=lax
x-middleware-rewrite: /en
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Accept-Encoding
x-nextjs-cache: STALE
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-powered-by: Next.js
cache-control: s-maxage=60, stale-while-revalidate=31535940
etag: "d7zz7a34o055ok"
content-type: text/html; charset=utf-8
content-encoding: gzip
date: Sat, 07 Jun 2025 15:50:21 GMT
via: 1.1 google
x-cache-status: miss
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000