strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), midi=(), payment=(self), usb=()
x-frame-options: DENY
cross-origin-opener-policy: same-origin
content-security-policy: default-src 'self'; base-uri 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data:; media-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'nonce-<request>' 'strict-dynamic'; form-action 'self' https://checkout.stripe.com; upgrade-insecure-requests
cache-control: public, max-age=0, s-maxage=300, must-revalidate
content-type: text/html; charset=utf-8
vary: rsc, next-router-state-tree, next-router-prefetch, accept-encoding