HTTP/1.1 401 Unauthorized Date: Tue, 12 May 2026 09:19:39 GMT Server: Apache X-Robots-Tag: noindex Link: ; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Access-Control-Allow-Origin: https://evil.example.com Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, PATCH, DELETE Access-Control-Allow-Credentials: true Vary: Origin X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=2592000 Referrer-Policy: Strict-origin Permissions-Policy: fullscreen=*, geolocation=(), camera=(), microphone=() Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked