Server | nginx |
Content-Type | text/html; charset=UTF-8 |
Transfer-Encoding | chunked |
Connection | keep-alive |
Donegal | Up here it's different |
Strict-Transport-Security | max-age=63072000; includeSubDomains; preload |
Public-Key-Pins | pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; pin-sha256="Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys="; pin-sha256="fck/caComy5b/n3lAaIe1GVnD4YVNMMdGlXqmQStusE="; max-age=5184000; report-uri="https://threelions.report-uri.io/r/default/hpkp/enforce" |
X-Frame-Options | DENY |
X-Content-Type-Options | nosniff |
X-XSS-Protection | 1; mode=block |
Content-Security-Policy | default-src 'none'; connect-src 'self'; img-src 'self'; style-src 'self'; frame-ancestors 'none'; font-src 'self'; media-src 'self'; report-uri https://threelions.report-uri.io/r/default/csp/enforce; |
Referrer-Policy | strict-origin-when-cross-origin |
Expect-CT | max-age=0, report-uri="https://threelions.report-uri.com/r/d/ct/reportOnly" |