HTTP/1.1 200 OK Date: Fri, 10 Apr 2026 11:40:35 GMT Server: WebServer Access-Control-Allow-Origin: Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=9cv9n3osg8bsfcto7av56o1bo2; expires=Fri, 10-Apr-2026 12:20:35 GMT; Max-Age=2400; path=/ Set-Cookie: wm_l_front=zh-CN; expires=Fri, 17-Apr-2026 11:40:35 GMT; Max-Age=604800; path=/ X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self' https://*; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://* https://*; style-src 'self' 'unsafe-inline' http://* https://*; img-src 'self' data: blob: http://* https://*; font-src 'self' data: http://* https://*; connect-src 'self' http://* https://*; frame-src 'self' https://*; object-src 'none'; media-src 'self' https://*; worker-src 'self' https://*; report-uri /csp-report-endpoint; Upgrade: h2 Connection: Upgrade, close Content-Length: 0 Content-Type: text/html; charset=UTF-8