HTTP/1.1 200 OK Date: Thu, 26 Feb 2026 22:08:50 GMT Server: unknown Content-Security-Policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none';report-uri /csp-report-endpoint; Access-Control-Allow-Origin: https://www.xingyunb.com Set-Cookie: wm_l_front=zh-CN; expires=Thu, 05-Mar-2026 22:08:50 GMT; Max-Age=604800; path=/ X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Content-Length: 0 Content-Type: text/html; charset=UTF-8