location

Isolate the document from cross-origin windows.

Retain references to new opened windows or tabs.

cross-origin-opener-policy

Indicates that different content may be provided to different clients, depending on the vary header.

headers

vary

origin-agent-cluster

A HSTS Policy informing the HTTP client how long to cache the HTTPS only policy and whether this applies to subdomains.

The time a browser should remember a site can only be accessed with https (seconds).

max-age

Use Google's preloading strict transport security.

strict-transport-security

type

description

charset

content-type

x-fb-debug

The date and time that the message was sent.

date

x-fb-connection-quality

Indicate a resource should be loaded from a different server while still appearing to be loaded from this server.

service

alt-svc

Control options for the current connection and list of hop-by-hop response fields.

The client or server would like to close the connection.

connection

The length of the response body in octets (8-bit bytes).

content-length

The resource has temporarily been moved to another location. This is superseded by 303 and 307.

HTTP/1.0 backwards compatible cache handling.

Force requests to the origin server before releasing a cache.

pragma

Inform all caching mechanisms from server to client whether they may cache this object.

May be stored by any cache but must be validated by the server.

cache-control

The time at which the response is considered stale.

expires

The content security policy allows the server to determine what resources the user is allowed to load.

default-src

script-src

style-src

connect-src

font-src

img-src

Define sources for audio, video, and track elements.

media-src

child-src

frame-src

manifest-src

Define sources for object, embed, and applet elements.

object-src

Define sources for Worker, SharedWork, and ServiceWorker scripts.

worker-src

Treat insecure URLs as though they are secure.

content-security-policy

DENY

x-frame-options

Prevents Internet Explorer from MIME-sniffing a response away from the declared content-type.

Block requests if type 'style' or 'script'.

x-content-type-options

x-xss-protection

reporting-endpoints

report-to

duplicate

Duplicate header. There is another header with this name and this may cause problems.

x-slb-proxy-status

transfer-encoding

proxy-status

invalid

This response contains headers with invalid or incomplete values.

The request cannot be processed due to a client error, such as malformed request.

HTTP Headers

Summary

Details

`https://www.facebook.com/suanhatrangtrinoithatsaigon/`

`https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fsuanhatrangtrinoithatsaigon%2F`