Ohchr.org - Spcommreports.ohchr.org

Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: MyServer
Set-Cookie: ASP.NET_SessionId=sz5yyaa55vewlcz3ihphlbfy; path=/; secure; HttpOnly; SameSite=Lax
X-AspNetMvc-Version: 5.3
Set-Cookie: lang=en; expires=Fri, 24-Apr-2026 12:02:23 GMT; path=/; secure; HttpOnly
X-Powered-By: NONE
Content-Security-Policy-Report-Only:                              default-src 'none';                              form-action 'Self' *.ohchr.org;                              child-src 'Self' https://pwm-image.trendmicro.jp;                             frame-ancestors 'none' ;                              img-src 'Self' data: https://yastatic.net https://cdn.honey.io blob: https://translate.google.com https://fonts.gstatic.com https://cdn.leanlibrary.app https://www.gstatic.com;                             style-src 'Self' 'unsafe-inline';                             style-src-attr 'Self' 'report-sample' 'unsafe-inline';                             style-src-elem 'Self' 'report-sample' 'unsafe-inline' https://*.scr.kaspersky-labs.com https://cdn.honey.io https://www.gstatic.com https://pwm-image.trendmicro.jp https://cdn.honey.io https://cdn.honey.io:443 https://fonts.googleapis.com https://www.gstatic.com:443;                             script-src 'Self' 'report-sample' 'unsafe-eval' https://ssl.google-analytics.com 'unsafe-inline' https://unpkg.com;                             script-src-attr 'unsafe-inline' blob:;                             script-src-elem 'Self' 'report-sample' 'unsafe-inline' https://*.scr.kaspersky-labs.com https://unpkg.com https://www.gstatic.com https://ssl.google-analytics.com https://connect.facebook.net https://infird.com https://ritrag.com;                             connect-src 'Self' https://overbridgenet.com https://translate.googleapis.com https://www.google-analytics.com;                             font-src 'Self' https://fonts.gstatic.com data: https://use.typekit.net;                             media-src 'Self' data:;                             manifest-src 'none';                             object-src 'Self';                             worker-src blob:;                             report-uri https://fawedsitereporting.azurewebsites.net/api/csp-report?;                             report-to default                             
Report-To: {group:default,max_age:31536000,endpoints:[{url:https://fawedsitereporting.azurewebsites.net/api/csp-report?}],include_subdomains:true}]}
Reporting-Endpoints: default="https://fawedsitereporting.azurewebsites.net/api/cspreportto?",prod="https://fawedsitereporting.azurewebsites.net/api/cspreporttoprod?"
NEL: {report_to:default,max_age:2592000,include_subdomains:true,failure_fraction:1.0}
Permissions-Policy-Report-Only: microphone=();report-to=default, camera=();report-to=default, fullscreen=*;report-to=default, payment=self;report-to=default
Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to=default
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=default
referrer-policy: strict-origin
Permissions-Policy: accelerometer=(); report-to=prod,autoplay=(); report-to=prod,browsing-topics=(); report-to=prod,camera=(); report-to=prod,clipboard-read=(); report-to=prod,clipboard-write=(); report-to=prod,geolocation=(); report-to=prod,gyroscope=(); report-to=prod,hid=(); report-to=prod,interest-cohort=(); report-to=prod,magnetometer=(); report-to=prod,microphone=(); report-to=prod,payment=(); report-to=prod,publickey-credentials-get=(); report-to=prod,screen-wake-lock=(); report-to=prod,serial=(); report-to=prod,sync-xhr=*; report-to=prod,usb=(); report-to=prod,fullscreen=*; report-to=prod
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Thu, 24 Apr 2025 12:02:22 GMT
Content-Length: 2992