Via: 1.1 7bd20765fb335de036eff4682be365d4.cloudfront.net (CloudFront)

Date: Fri, 28 Jun 2024 16:07:35 GMT

Server: CloudFront

X-Cache: Redirect from cloudfront

Location: https://portal.roblox.com/

X-Amz-Cf-Id: I7JfsFwPW5Hr1t1l_eDKmylGIawIenGdHDlm8POgJ4lGftIEAyR3EQ==

Content-Type: text/html

X-Amz-Cf-Pop: JFK52-P1

Content-Length: 167

Reporting-Endpoints: enforce="https://metrics.roblox.com/v1/csp/report?type=enforce", report="https://metrics.roblox.com/v1/csp/report?type=report", sentry="https://o293668.ingest.sentry.io/api/5337301/security/?sentry_key=2c039001a72b4824851c1b3f71ce1f8f&sentry_environment=production"

Content-Security-Policy: child-src 'self' blob: roblox-studio: roblox-studio-sitetest1: roblox-studio-sitetest2: roblox-studio-sitetest3: *.roblox.com *.robloxlabs.com *.rbx.com https://rbx.okta.com https://dev-04639403.okta.com https://setup.rbxcdn.com https://www.youtube-nocookie.com; connect-src 'self' *.simulprod.com *.simulpong.com *.roblox.com *.robloxlabs.com *.rbxcdn.com rbx.okta.com dev-04639403.okta.com *.google-analytics.com *.sentry.io https://search-api.swiftype.com; default-src 'self'; font-src 'self' https://fonts.roblox.com https://webblox.roblox.com; frame-ancestors 'none'; frame-src 'self' roblox-studio: roblox-studio-sitetest1: roblox-studio-sitetest2: roblox-studio-sitetest3: *.roblox.com *.robloxlabs.com *.rbx.com https://rbx.okta.com https://dev-04639403.okta.com https://setup.rbxcdn.com https://www.youtube-nocookie.com https://www.figma.com https://js.stripe.com https://www.instagram.com; img-src 'self' blob: data: *.rbxcdn.com *.roblox.com *.robloxlabs.com *.google.com *.google-analytics.com www.googletagmanager.com https://fonts.gstatic.com https://img.tarobicdn.com https://img.guildedcdn.com https://img.youtube.com *.fullstory.com https://devforum-uploads.s3.us-east-2.amazonaws.com https://devforum-uploads.s3.dualstack.us-east-2.amazonaws.com https://doy2mn9upadnk.cloudfront.net; media-src 'self' blob: *.roblox.com *.robloxlabs.com; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' *.googletagmanager.com *.google-analytics.com https://*.awswaf.com *.roblox.com *.robloxlabs.com *.fullstory.com https://js.stripe.com https://www.youtube.com https://www.instagram.com/embed.js; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com; upgrade-insecure-requests ; worker-src 'self' blob:; report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; report-to enforce

Via: 1.1 66ea06c52ae44609b3bf6f6054c081b6.cloudfront.net (CloudFront)

Date: Fri, 28 Jun 2024 16:07:45 GMT

Server: CloudFront

X-Cache: Error from cloudfront

X-Amz-Cf-Id: ZwDpsDHLO8PSbzweVyGLl5va-Xagss0QONhi0-s66RTzJoY1CoH8JA==

Content-Type: text/html

X-Amz-Cf-Pop: JFK52-P1

Content-Length: 919

Reporting-Endpoints: enforce="https://metrics.roblox.com/v1/csp/report?type=enforce", report="https://metrics.roblox.com/v1/csp/report?type=report", sentry="https://o293668.ingest.sentry.io/api/5337301/security/?sentry_key=2c039001a72b4824851c1b3f71ce1f8f&sentry_environment=production"

Content-Security-Policy: child-src 'self' blob: roblox-studio: roblox-studio-sitetest1: roblox-studio-sitetest2: roblox-studio-sitetest3: *.roblox.com *.robloxlabs.com *.rbx.com https://rbx.okta.com https://dev-04639403.okta.com https://setup.rbxcdn.com https://www.youtube-nocookie.com; connect-src 'self' *.simulprod.com *.simulpong.com *.roblox.com *.robloxlabs.com *.rbxcdn.com rbx.okta.com dev-04639403.okta.com *.google-analytics.com *.sentry.io https://search-api.swiftype.com; default-src 'self'; font-src 'self' https://fonts.roblox.com https://webblox.roblox.com; frame-ancestors 'none'; frame-src 'self' roblox-studio: roblox-studio-sitetest1: roblox-studio-sitetest2: roblox-studio-sitetest3: *.roblox.com *.robloxlabs.com *.rbx.com https://rbx.okta.com https://dev-04639403.okta.com https://setup.rbxcdn.com https://www.youtube-nocookie.com https://www.figma.com https://js.stripe.com https://www.instagram.com; img-src 'self' blob: data: *.rbxcdn.com *.roblox.com *.robloxlabs.com *.google.com *.google-analytics.com www.googletagmanager.com https://fonts.gstatic.com https://img.tarobicdn.com https://img.guildedcdn.com https://img.youtube.com *.fullstory.com https://devforum-uploads.s3.us-east-2.amazonaws.com https://devforum-uploads.s3.dualstack.us-east-2.amazonaws.com https://doy2mn9upadnk.cloudfront.net; media-src 'self' blob: *.roblox.com *.robloxlabs.com; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' *.googletagmanager.com *.google-analytics.com https://*.awswaf.com *.roblox.com *.robloxlabs.com *.fullstory.com https://js.stripe.com https://www.youtube.com https://www.instagram.com/embed.js; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com; upgrade-insecure-requests ; worker-src 'self' blob:; report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; report-to enforce

Strict-Transport-Security: max-age=63072000; includeSubDomains; preload