HTTP/1.1 200 200 Content-Type: image/jpeg Transfer-Encoding: chunked Connection: keep-alive Date: Fri, 12 Dec 2025 16:41:24 GMT X-Frame-Options: SAMEORIGIN Frame-Options: SAMEORIGIN STRICT-TRANSPORT-SECURITY: max-age=16070400; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: master-only Referrer-Policy: unsafe-url X-Application-Context: application Pragma: No-cache Cache-Control: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Accept-Encoding Set-Cookie: JSESSIONID=07A15FB7043552FECD683C9B8D5EFA37; Path=/; HttpOnly;HttpOnly;Secure;SameSite=Strict Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: https: