HTTP/2 200
cache-control: no-cache, no-store, must-revalidate
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
content-type: text/plain;charset=UTF-8
date: Tue, 14 Apr 2026 03:48:59 GMT
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
referrer-policy: no-referrer
server: Apache/2.4.66 (Debian)
set-cookie: ocexfs76yoe2=fae5003f49421836c006ef3a07b86baa; path=/; secure; HttpOnly; SameSite=Lax
set-cookie: oc_sessionPassphrase=%2FsEu5b1GCprHfK4f4G35q%2FYyZ0cTW5%2BFXoWXNvx2ic1CWYPc9VzXGnmHhsyieg5UF8kR5aPq6S2Ia0fAZTCy7VVj1WXwcAeEWMWHQk%2BG%2Fd048AQRTf9OZm0AJLUpO45u; path=/; secure; HttpOnly; SameSite=Lax
set-cookie: ocexfs76yoe2=fae5003f49421836c006ef3a07b86baa; path=/; secure; HttpOnly; SameSite=Lax
set-cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
set-cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
set-cookie: ocexfs76yoe2=fae5003f49421836c006ef3a07b86baa; path=/; secure; HttpOnly; SameSite=Lax
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-nextcloud-well-known: 1
x-permitted-cross-domain-policies: none
x-powered-by: PHP/8.3.30
x-request-id: hjzokHPO2YT8KgfP9CM3
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block

Contact: https://hackerone.com/nextcloud
Expires: 2026-08-31T23:00:00.000Z
Acknowledgments: https://hackerone.com/nextcloud/thanks
Acknowledgments: https://github.com/nextcloud/security-advisories/security/advisories
Policy: https://hackerone.com/nextcloud
Preferred-Languages: en