X-Frame-Options: ALLOW-FROM https://login.medsci.cn

Strict-Transport-Security: max-age=31536000;includeSubdomains; preload;

Access-Control-Allow-Origin: *

X-Content-Type-Options: nosniff

Access-Control-Allow-Methods: GET, POST, OPTIONS

Content-Security-Policy: default-src 'self' wss: blob: *.medsci.cn *.bdimg.com *.bioon.com *.idrugsafety.cn *.bioon.com.cn *.google-analytics.com *.qq.com *.aliyun.com *.alicdn.com *.doubleclick.net *.alibaba.com *.bdstatic.com *.gitee.com *.googletagmanager.com *.assetsgiocdn.com *.giocdn.com *.growingio.com *.baidu.com *.bioon.com.cn *.staticfile.org *.bootcdn.cn *.jshub.com *.google.com *.quilljs.com *.qcloud.com *.myqcloud.com *.aliyuncs.com *.aliapp.org *.cdnjs.net 'unsafe-inline' 'unsafe-eval';script-src 'self' *.medsci.cn *.bdimg.com *.bioon.com *.google-analytics.com *.qq.com *.alicdn.com *.google.com *.baidu.com *.doubleclick.net *.aliyun.com *.alibaba.com *.bdstatic.com *.googletagmanager.com *.assetsgiocdn.com *.giocdn.com *.growingio.com *.baidu.com *.bioon.com.cn *.staticfile.org *.gitee.com *.bootcdn.cn *.jshub.com *.quilljs.com *.qcloud.com *.myqcloud.com *.aliyuncs.com *.aliapp.org *.cdnjs.net 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://*.medsci.cn https://*.bioon.com https://*.bioon.com.cn; img-src 'self' data: https: blob: ;worker-src 'self' blob: ; media-src 'self' blob: https: ; font-src 'self' data: http: ;child-src 'self' blob: *.medsci.cn

Connection: keep-alive

Date: Wed, 08 May 2024 03:15:45 GMT

Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,if-Range,Authorization

Content-Type: text/html

Location: https://dict.bioon.com/