mclaren.com Review

 User-agent: *


Allow: /*

Disallow: /404
Disallow: /*/404
Disallow: /api/


Sitemap: https://www.mclaren.com/sitemap.xml
    

HTTP/1.1 200 OK
Date: Sun, 22 Feb 2026 14:48:46 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubDomains; preload
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
access-control-allow-origin: https://mclaren-web-fe--pr-893-rel-prd-a57be86-1.redwater-235026ec.uksouth.azurecontainerapps.io
x-robots-tag: all
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://www.youtube-nocookie.com https://www.youtube.com/iframe_api https://s.ytimg.com https://*.youtube.com https://www.tiktok.com https://www.instagram.com https://platform.twitter.com https://cdn.monterosa.cloud https://connect.facebook.net https://static.xx.fbcdn.net https://cdn-ukwest.onetrust.com https://www.googletagmanager.com https://players.brightcove.net https://api.exponea.com https://*.bloomreach.com https://cdn.usefathom.com https://resources.digital-cloud.medallia.eu https://collection.decibelinsight.net https://googleads.g.doubleclick.net https://*.kampyle.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.ttwstatic.com https://*.kampyle.com; img-src 'self' blob: data: images.ctfassets.net https://i.ytimg.com https://cdn-ukwest.onetrust.com https://www.google.com https://www.googletagmanager.com https://*.brightcove.com https://*.brightcovecdn.com https://*.googlesyndication.com https://*.doubleclick.net https://*.usefathom.com https://flagcdn.com https://www.facebook.com; media-src 'self' https: http: data: blob:; connect-src 'self' https://public-api-identify-europe.monterosa.cloud https://www.youtube.com https://www.tiktok.com https://*.tiktokv.com https://www.instagram.com https://api.twitter.com https://images.ctfassets.net https://api.exponea.com https://*.bloomreach.com https://cdn.monterosa.cloud https://cdn-ukwest.onetrust.com https://geolocation.onetrust.com https://privacyportal-uk.onetrust.com https://www.googletagmanager.com https://www.google.com https://*.google-analytics.com https://*.googlesyndication.com https://*.doubleclick.net https://*.brightcove.com https://*.brightcovecdn.com https://*.boltdns.net https://*.prod.boltdns.net https://*.racing.mclaren.com https://*.usefathom.com https://resources.digital-cloud.medallia.eu https://analytics-fe.digital-cloud.medallia.eu https://collection.decibelinsight.net wss://collection.decibelinsight.net https://*.kampyle.com; font-src 'self' data: fonts.gstatic.com; worker-src blob:; object-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://www.tiktok.com https://www.instagram.com https://platform.twitter.com https://apps.monterosa.cloud https://www.facebook.com https://www.googletagmanager.com https://resources.digital-cloud.medallia.eu; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content
cache-control: public, max-age=3600, s-maxage=3600, stale-while-revalidate=30
x-locale: en
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
x-nextjs-cache: HIT
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-powered-by: Next.js
cf-cache-status: DYNAMIC
content-encoding: gzip
Server: cloudflare
CF-RAY: 9d1f49440ae5d740-NRT