HTTP/1.1 200 OK
Date: Fri, 18 Feb 2022 06:42:57 GMT
Server: Apache
X-Powered-By: FUM
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Security-Policy: default-src 'self'; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' umcdn.um.ac.ir; style-src 'self' 'unsafe-inline' umcdn.um.ac.ir; img-src 'self' data: https://trustseal.enamad.ir www.um.ac.ir um.ac.ir; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; form-action 'self' profdoc.um.ac.ir; frame-src 'self'; worker-src 'self' data: blob:; block-all-mixed-content
Strict-Transport-Security: max-age=63072000; includeSubdomains;
X-Content-Type-Options: nosniff
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block;
X-XSS-Protection: 1; mode=block
Set-Cookie: _csrf-cms=26c402672c4c2d94e257cef1238ac21457928e3395cec02de95399789a77e9b3a%3A2%3A%7Bi%3A0%3Bs%3A9%3A%22_csrf-cms%22%3Bi%3A1%3Bs%3A32%3A%22JJ2-HTWr3_NhmAH6vNQEvRdJf5x5ZuXA%22%3B%7D; path=/; secure; HttpOnly;HttpOnly;Secure
Upgrade: h2,h2c
Connection: Upgrade
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8