| Content-Type | text/html; charset=UTF-8 |
| Last-Modified | Wed, 28 Feb 2018 13:45:47 GMT |
| X-Content-Type-Options | nosniff |
| Strict-Transport-Security | max-age=15552001; includeSubDomains; preload |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |
| Cache-Control | max-age=0 |
| Expires | Wed, 28 Feb 2018 13:50:50 GMT |
| X-XSS-Protection | 1; mode=block |
| X-Frame-Options | ALLOW-FROM https://facebook.com, https://facebook.net, https://messenger.com, https://alpineplanet.com, https://staticxx.facebook.com |
| Content-Security-Policy | default-src 'self'; img-src 'self' data: *.cdninstagram.com *.alpineplanet.com *.onesignal.com *.gravatar.com *.fbcdn.net *.wp.com *.w.org *.facebook.com *.twimg.com *.twitter.com *.wordpress.org *.google-analytics.com *.jsdelivr.net *.doubleclick.net *.ytimg.com *.flipboard.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.alpineplanet.com *.apple-livephotoskit.com *.cloudfront.net *.onesignal.com onesignal.com *.google-analytics.com *.linkedin.com *.pinterest.com *.ytimg.com *.youtu.be *.twimg.com *.doubleclick.net *.wordpress.com *.google.com *.ampproject.org *.googleapis.com *.wp.com *.youtube.com *.vimeo.com *.facebook.net *.twitter.com *.google-analytics.com *.facebook.com *.akamaihd.net *.fbcdn.net *.amazonaws.com *.cloudflare.com *.jsdelivr.net *.sentry.io *.gstatic.com *.realfavicongenerator.net realfavicongenerator.net ; style-src 'self' 'unsafe-inline' *.alpineplanet.com *.onesignal.com onesignal.com *.googleapis.com *.wp.com *.vimeocdn.com *.vimeo.com *.facebook.net *.twitter.com *.google-analytics.com *.facebook.com *.akamaihd.net *.amazonaws.com *.twimg.com *.gravatar.com *.jsdelivr.net *.cloudflare.com amp.cloudflare.com *.gstatic.com *.realfavicongenerator.net realfavicongenerator.net; font-src 'self' *.alpineplanet.com alpineplanet.com cdn.alpineplanet.com *.wp.com *.onesignal.com onesignal.com *.gstatic.com wordpress.com *.wordpress.com data: *.sentry.io realfavicongenerator.net; frame-src 'self' data: *.alpineplanet.com *.flipboard.com *.dailymotion.com *.ampproject.net *.perishablepress.com *.afterthedeadline.com *.youtube.com *.soundcloud.com *.googleapis.com *.wp.com *.vimeo.com *.facebook.net *.twitter.com twitter.com *.google-analytics.com *.facebook.com *.akamaihd.net *.cloudflare.com ; connect-src 'self' data: *.alpineplanet.com *.google.com *.google.fr *.icloud.com *.fbcdn.net *.ampproject.net *.dailymotion.com *.wp.com twitter.com *.cloudflare.com *.sentry.io *.youtu.be *.doubleclick.net *.gravatar.com *.facebook.com *.twitter.com *.google-analytics.com *.youtube.com; object-src 'self'; media-src 'self' *.facebook.com twitter.com *.youtu.be *.google-analytics.com *.cloudflare.com *.sentry.io *.twitter.com ; base-uri 'self'; |
| X-CDN-Pop | bhs |
| X-CDN-Pop-IP | 137.74.122.0/27 |
| X-Cacheable | Cacheable |
| Accept-Ranges | bytes |
| Transfer-Encoding | chunked |
| Connection | keep-alive |