merlot.org Review

 N/A

HTTP/1.1 302 Found
Date: Wed, 20 Aug 2025 08:04:08 GMT
Server: Apache
Location: https://www.merlot.org/
Content-Length: 207
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 301 Moved Permanently
Date: Wed, 20 Aug 2025 08:04:09 GMT
Server: Apache
Location: https://www.merlot.org/merlot/
Content-Length: 238
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 200 200
Date: Wed, 20 Aug 2025 08:04:09 GMT
Server: Apache
Content-Security-Policy: default-src 'self' data: https://*.googleapis.com https://apis.google.com https://accounts.google.com https://*.googletagmanager.com https://www.google.com *.addthis.com https://*.facebook.com *.facebook.com https://*.linkedin.com https://*.thecn.com https://platform.twitter.com platform.twitter.com *.pinterest.com https://www.google-analytics.com; connect-src 'self' https://translate.googleapis.com https://*.googletagmanager.com https://www.google.com https://www.google-analytics.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' translate.googleapis.com *.addthis.com https://*.googletagmanager.com *.addthisedge.com *.pinterest.com https://www.google.com https://translate.google.com https://ajax.googleapis.com https://www.gstatic.com https://apis.google.com apis.google.com https://accounts.google.com https://translate.googleapis.com https://www.google-analytics.com https://connect.facebook.net https://*.facebook.com https://platform.twitter.com *.facebook.com platform.twitter.com https://*.thecn.com https://*.linkedin.com; frame-ancestors 'self' http://www.oeconsortium.org https://www.oeconsortium.org; style-src 'self' 'unsafe-inline' https://translate.googleapis.com https://*.googletagmanager.com https://www.google.com https://fonts.googleapis.com http://www.w3.org/2000/svg; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' * https://* *.addthis.com data:
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Content-Type: text/html;charset=UTF-8
Content-Language: ja
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Set-Cookie: XSRF-TOKEN=503fa23c-2f79-4c5f-b1c3-999b6ad1cf07; Path=/merlot; Secure;HttpOnly;Secure
Set-Cookie: SESSION=NDA2NWU5NTQtNWIwYy00YmVlLTk5MjgtMGM2YWI0YTNjYjY0; Path=/merlot/; Secure; HttpOnly; SameSite=None;HttpOnly;Secure
Referrer-Policy: strict-origin
Cross-Origin-Window-Policy: deny
Cross-Origin-Opener-Policy: deny
Feature-Policy: vibrate 'none'; midi 'none'; notifications 'none'; push 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'; sync-xhr 'self'
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked