| Content-Type | text/html; charset=UTF-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Cache-Control | max-age=300, public |
| X-Drupal-Dynamic-Cache | HIT |
| X-UA-Compatible | IE=edge |
| Content-language | en |
| X-Content-Type-Options | nosniff |
| X-Frame-Options | DENY |
| Expires | Sun, 19 Nov 1978 05:00:00 GMT |
| Last-Modified | Wed, 25 Oct 2017 19:39:29 GMT |
| ETag | "1508960369" |
| X-Generator | Drupal 8 (https://www.drupal.org) |
| Content-Security-Policy | default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src www.youtube-nocookie.com app-sj17.marketo.com; connect-src 'self' hackerone.com *.mktoresp.com checkout.stripe.com; font-src 'self'; form-action 'self' syndication.twitter.com platform.twitter.com; frame-ancestors 'self'; frame-src www.youtube.com www.youtube-nocookie.com app-sj17.marketo.com boards.greenhouse.io platform.twitter.com syndication.twitter.com checkout.stripe.com; img-src 'self' data: www.google-analytics.com syndication.twitter.com platform.twitter.com *.twimg.com q.stripe.com; media-src 'self'; script-src 'self' www.google-analytics.com app-sj17.marketo.com munchkin.marketo.net boards.greenhouse.io platform.twitter.com cdn.syndication.twimg.com checkout.stripe.com; style-src 'self' 'unsafe-inline' app-sj17.marketo.com boards.greenhouse.io boards-use1-cdn.greenhouse.io platform.twitter.com checkout.stripe.com; report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598 |
| Strict-Transport-Security | max-age=31536000; includeSubDomains; preload |
| X-Xss-Protection | 1; mode=block |
| X-Drupal-Cache | HIT |
| Content-Encoding | gzip |
| X-Request-ID | v-60846e12-ba42-11e7-ab5c-02c51b741cbd |
| X-AH-Environment | prod |
| X-Geo-Country | CA |
| Vary | Cookie,Accept-Encoding,X-Geo-Country |
| X-Varnish | 874191302 |
| Age | 0 |
| Via | 1.1 varnish-v4 |
| X-Cache | MISS |
| Accept-Ranges | bytes |
| Server | cloudflare-nginx |
| CF-RAY | 3b3d232879a83fcb-YUL |