nextjs.org HTTP headers

Status

200

Final URL

https://nextjs.org

Access-Control-Allow-Origin

*

Age

512

Cache-Control

public, max-age=0, must-revalidate

Content-Disposition

inline

Content-Security-Policy

default-src 'self' nextjs.org *.nextjs.org vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org localhost:*;script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google.com www.google-analytics.com www.googleadservices.com www.gstatic.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.twimg.com cdn.ampproject.org www.googletagmanager.com *.googleapis.com *.fides-cdn.ethyca.com *.ethyca.com cdn.ethyca.com cdn.vercel-insights.com va.vercel-scripts.com app.cal.com *.cr-relay.com vercel.com *.vercel.com *.vercel.sh vercel.live nextjs.org *.nextjs.org localhost:* chrome-extension://*;child-src *.youtube.com *.youtube-nocookie.com *.stripe.com www.google.com td.doubleclick.net github.com calendly.com vercel.cal.com *.vercel.app *.vercel.dev nextjs.org *.nextjs.org vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org localhost:*;style-src 'self' 'unsafe-inline' *.googleapis.com nextjs.org *.nextjs.org vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org localhost:*;img-src * blob: data:;media-src 'self' videos.ctfassets.net user-images.githubusercontent.com replicate.delivery *.public.blob.vercel-storage.com blob: data: nextjs.org *.nextjs.org vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org localhost:*;connect-src 'self' data: vercel.com *.vercel.com *.vercel.sh vercel.live wss://*.vercel.com wss://*.nextjs.org nextjs.org *.nextjs.org localhost:* cdn.vercel-insights.com va.vercel-scripts.com cdp.vercel.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.cr-relay.com *.ethyca.com cdn.ethyca.com risk.clearbit.com *.ingest.sentry.io *.ingest.us.sentry.io *.public.blob.vercel-storage.com;font-src 'self' *.nextjs.org *.vercel.com *.gstatic.com vercel.live *.vercel.sh;worker-src 'self' *.nextjs.org *.vercel.com blob:

Content-Type

text/html; charset=utf-8

Date

Mon, 13 Jul 2026 21:19:58 GMT

Feature-Policy

fullscreen 'self'; camera 'none'

Link

</_next/static/immutable/media/797e433ab948586e.p.1v5bejj26fx9h.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/immutable/media/Geist_Variable-s.p.2v-cf9syxr5ni.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/immutable/media/vercel-light.3_gxxexgi1nmy.svg>; rel=preload; as="image", </_next/static/immutable/media/vercel-dark.1f3cgy23m5_jy.svg>; rel=preload; as="image", </_next/static/immutable/media/nextjs-logotype-light.00-_80jv8_dct.svg>; rel=preload; as="image", </_next/static/immutable/media/nextjs-logotype-dark.3h4a2z2v_dkod.svg>; rel=preload; as="image", </_next/static/immutable/media/vercel-logotype-light.0k7echqflwha4.svg>; rel=preload; as="image", </_next/static/immutable/media/vercel-logotype-dark.3m9ycmsc1ql8m.svg>; rel=preload; as="image"

Referrer-Policy

origin-when-cross-origin

Server

Vercel

Strict-Transport-Security

max-age=31536000; includeSubDomains; preload

Vary

rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

X-Content-Type-Options

nosniff

X-Dns-Prefetch-Control

on

X-Download-Options

noopen

X-Frame-Options

DENY

X-Matched-Path

/home/none

X-Nextjs-Prerender

1

X-Nextjs-Stale-Time

300

X-Vercel-Cache

HIT

X-Vercel-Id

cdg1::xgl9d-1783977598173-99966f23574c

X-Xss-Protection

0