nextjs.org
HTTP check results
HTTP Response Headers
age
737
cache-control
public, max-age=0, must-revalidate
content-encoding
br
content-security-policy
default-src 'self' nextjs.org *.nextjs.org vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org localhost:*;script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google.com www.google-analytics.com www.googleadservices.com www.gstatic.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.twimg.com cdn.ampproject.org www.googletagmanager.com *.googleapis.com *.fides-cdn.ethyca.com *.ethyca.com cdn.ethyca.com cdn.vercel-insights.com va.vercel-scripts.com app.cal.com *.cr-relay.com vercel.com *.vercel.com *.vercel.sh vercel.live nextjs.org *.nextjs.org localhost:* chrome-extension://*;child-src *.youtube.com *.youtube-nocookie.com *.stripe.com www.google.com td.doubleclick.net github.com calendly.com vercel.cal.com nextjs.org *.nextjs.org vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org localhost:*;style-src 'self' 'unsafe-inline' *.googleapis.com nextjs.org *.nextjs.org vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org localhost:*;img-src * blob: data:;media-src 'self' videos.ctfassets.net user-images.githubusercontent.com replicate.delivery *.public.blob.vercel-storage.com blob: data: nextjs.org *.nextjs.org vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org localhost:*;connect-src 'self' data: vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org nextjs.org *.nextjs.org localhost:* cdn.vercel-insights.com va.vercel-scripts.com cdp.vercel.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.cr-relay.com *.ethyca.com cdn.ethyca.com *.algolia.net *.algolianet.com risk.clearbit.com *.ingest.sentry.io *.ingest.us.sentry.io *.public.blob.vercel-storage.com;font-src 'self' *.nextjs.org *.vercel.com *.gstatic.com vercel.live *.vercel.sh;worker-src 'self' *.nextjs.org *.vercel.com blob:
content-type
text/html; charset=utf-8
date
Thu, 26 Mar 2026 23:50:59 GMT
feature-policy
fullscreen 'self'; camera 'none'
link
</_next/static/media/797e433ab948586e.p.0.q-h669a_dqa.woff2?dpl=dpl_FQEPi6993RFrrSpBVXjhMbGE1X4y>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/caa3a2e1cccd8315.p.16t1db8_9y2o~.woff2?dpl=dpl_FQEPi6993RFrrSpBVXjhMbGE1X4y>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/logo-github-light.05ykg7xnxmakr.svg?dpl=dpl_FQEPi6993RFrrSpBVXjhMbGE1X4y>; rel=preload; as="image", </_next/static/media/logo-github-dark.0~-g8v5c8-dnv.svg?dpl=dpl_FQEPi6993RFrrSpBVXjhMbGE1X4y>; rel=preload; as="image", </_next/static/media/logo-twitter-x-light.11ouelr3q4ejn.svg?dpl=dpl_FQEPi6993RFrrSpBVXjhMbGE1X4y>; rel=preload; as="image", </_next/static/media/logo-twitter-x-dark.0ud~t5rrenorx.svg?dpl=dpl_FQEPi6993RFrrSpBVXjhMbGE1X4y>; rel=preload; as="image", </_next/static/media/logo-bluesky-light.07latpfjjev~7.svg?dpl=dpl_FQEPi6993RFrrSpBVXjhMbGE1X4y>; rel=preload; as="image"
referrer-policy
origin-when-cross-origin
server
Vercel
strict-transport-security
max-age=31536000; includeSubDomains; preload
vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-content-type-options
nosniff
x-dns-prefetch-control
on
x-download-options
noopen
x-frame-options
DENY
x-matched-path
/home/none
x-nextjs-prerender
1
x-nextjs-stale-time
300
x-powered-by
Next.js
x-vercel-cache
HIT
x-vercel-id
arn1::pdx1::m5v7p-1774569797675-b6df3a8ec357
x-xss-protection
0
Security Headers
strict-transport-security
content-security-policy
x-content-type-options
x-frame-options
x-xss-protection
referrer-policy
permissions-policy