HTTP/2 200
cache-control: no-cache, no-store, must-revalidate
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
content-type: text/plain;charset=UTF-8
date: Sun, 05 Apr 2026 08:15:04 GMT
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
referrer-policy: no-referrer
server: Apache/2.4.66 (Debian)
set-cookie: ocexfs76yoe2=0e51bcf9950c6c3c1daa59f041984726; path=/; secure; HttpOnly; SameSite=Lax
set-cookie: oc_sessionPassphrase=wMD2r4bjh3qzFmpNL0NjJILFcgpYM7BaIp9xoMpv24WNwSUdpi3tOs5%2FTjqdmUplkJf6bjitdDnd3ItEf4g2yfB7kyCENUGFDsaqdH23YmQe7xumvAbfzZt5w0IdtZc4; path=/; secure; HttpOnly; SameSite=Lax
set-cookie: ocexfs76yoe2=0e51bcf9950c6c3c1daa59f041984726; path=/; secure; HttpOnly; SameSite=Lax
set-cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
set-cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
set-cookie: ocexfs76yoe2=0e51bcf9950c6c3c1daa59f041984726; path=/; secure; HttpOnly; SameSite=Lax
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-nextcloud-well-known: 1
x-permitted-cross-domain-policies: none
x-powered-by: PHP/8.3.30
x-request-id: lt7eKRvu1nrKBoKkjBte
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block

Contact: https://hackerone.com/nextcloud
Expires: 2026-08-31T23:00:00.000Z
Acknowledgments: https://hackerone.com/nextcloud/thanks
Acknowledgments: https://github.com/nextcloud/security-advisories/security/advisories
Policy: https://hackerone.com/nextcloud
Preferred-Languages: en