Ohchr.org - Www2.ohchr.org

content-type: text/html
content-encoding: gzip
last-modified: Wed, 08 Feb 2006 08:55:19 GMT
accept-ranges: bytes
etag: "d9dd68638d2cc61:0"
vary: Accept-Encoding
server: MyServer
content-security-policy-report-only: default-src 'none';                              form-action 'none';         object-src 'Self';                             child-src 'Self' https://www.ohchr.org http://www.ohchr.org https://cdn.embedly.com;                             frame-ancestors 'Self' ;                              img-src 'Self'  http://*.ohchr.org https://p.typekit.net https://ssl.google-analytics.com http://www.w3.org https://jigsaw.w3.org https://www.w3.org http://jigsaw.w3.org https://uploads-ssl.webflow.com https://log-papago.naver.com;                             style-src 'Self' 'unsafe-inline' http://*.ohchr.org https://fonts.googleapis.com;                             style-src-attr 'Self' 'report-sample' 'unsafe-inline';                             style-src-elem 'Self' 'unsafe-inline' 'report-sample' http://*.ohchr.org https://fonts.googleapis.com https://*.kaspersky-labs.com https://fonts.googleapis.com;                             script-src 'Self' 'report-sample' 'unsafe-inline' https://ssl.google-analytics.com http://script.aculo.us https://*.cloudfront.net https://connect.facebook.net https://ajax.googleapis.com;                             script-src-attr 'Self' 'unsafe-inline';                             script-src-elem 'Self' 'report-sample' 'unsafe-inline' http://script.aculo.us https://ssl.google-analytics.com https://ajax.googleapis.com https://use.typekit.net https://*.cloudfront.net https://*.kaspersky-labs.com;                             connect-src 'Self' https://ssl.google-analytics.com https://uploads-ssl.webflow.com;                             font-src 'Self' data: https://use.typekit.net https://fonts.gstatic.com;                             media-src data: https://www.dropbox.com https://*.dropboxusercontent.com;                             worker-src 'none';                             manifest-src 'none' ;                             report-uri https://fawedsitereporting.azurewebsites.net/api/csp-report?;                             report-to default
report-to: {group:default,max_age:31536000,endpoints:[{url:https://fawedsitereporting.azurewebsites.net/api/csp-report?}],include_subdomains:true}]}
reporting-endpoints: default="https://fawedsitereporting.azurewebsites.net/api/cspreportto?",prod="https://fawedsitereporting.azurewebsites.net/api/cspreporttoprod?"
permissions-policy-report-only: microphone=();report-to=default, camera=();report-to=default, fullscreen=*;report-to=default, payment=self;report-to=default
cross-origin-embedder-policy-report-only: require-corp; report-to=default
cross-origin-opener-policy-report-only: same-origin; report-to=default
nel: {report_to:default,max_age:2592000,include_subdomains:true,failure_fraction:1.0}
referrer-policy: strict-origin
permissions-policy: accelerometer=(); report-to=prod,autoplay=(); report-to=prod,browsing-topics=(); report-to=prod,camera=(); report-to=prod,clipboard-read=(); report-to=prod,clipboard-write=(); report-to=prod,geolocation=(); report-to=prod,gyroscope=(); report-to=prod,hid=(); report-to=prod,interest-cohort=(); report-to=prod,magnetometer=(); report-to=prod,microphone=(); report-to=prod,payment=(); report-to=prod,publickey-credentials-get=(); report-to=prod,screen-wake-lock=(); report-to=prod,serial=(); report-to=prod,sync-xhr=*; report-to=prod,usb=(); report-to=prod,fullscreen=*; report-to=prod
x-frame-options: ALLOW-FROM SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
date: Wed, 23 Apr 2025 10:49:03 GMT
content-length: 414