| Cache-Control | public, max-age=0 |
| Transfer-Encoding | chunked |
| Content-Type | text/html; charset=UTF-8 |
| Content-Encoding | gzip |
| Last-Modified | Fri, 01 Dec 2017 19:43:04 GMT |
| Accept-Ranges | bytes |
| ETag | W/"c76-160139a8de2" |
| Vary | Accept-Encoding |
| content-security-policy | default-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.platypi.io https://*.platypicms.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com http://*.google-analytics.com https://*.googleadservices.com https://*.gstatic.com https://*.pardot.com https://*.facebook.net https://*.facebook.com https://*.youtube.com https://*.vimeo.com https://*.instagram.com https://*.cdninstagram.com https://*.twitter.com http://*.twitter.com https://*.t.co http://*.t.co https://t.co http://t.co https://*.linkedin.com https://*.disqus.com https://*.disquscdn.com https://*.doubleclick.net https://*.vo.msecnd.net https://*.typekit.net https://*.licdn.com https://*.twimg.com https://*.akamaihd.net https://*.infusionsoft.com https://*.redditstatic.com https://*.blob.core.windows.net https://*.g.doubleclick.net https://*.ticketbiscuit.com https://*.ticketmaster.com https://*.eventbrite.com https://*.ticketfly.com https://*.stubhub.com https://*.preptix.com https://*.soundcloud.com http://*.soundcloud.com bhamcorpchallenge.azurewebsites.net bhamcorpchallenge-staging.azurewebsites.net bhamcorporatechallenge.com my.bhamcorporatechallenge.com *.stripe.com unsafe-inline *.jquery.com *.cloudflare.com *.bootstrapcdn.com; frame-ancestors 'none'; form-action 'self' |
| x-xss-protection | 1; mode=block |
| strict-transport-security | max-age=31536000 |
| x-frame-options | SAMEORIGIN |