HTTP/1.1 200 OK Date: Tue, 12 May 2026 11:48:42 GMT Server: Apache X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type X-WP-Total: 88 X-WP-TotalPages: 9 Link: ; rel="next" Allow: GET Access-Control-Allow-Origin: https://evil.com Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, PATCH, DELETE Access-Control-Allow-Credentials: true Vary: Origin X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=2592000 Referrer-Policy: Strict-origin Permissions-Policy: fullscreen=*, geolocation=(), camera=(), microphone=() Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked