| Cache-Control | no-cache,must-revalidate,max-age=0,no-store,private |
| Content-Security-Policy-Report-Only | default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob: file:; frame-ancestors 'self' *.salesforce.com *.force.com *.visualforce.com *.documentforce.com; font-src https: data: blob: file:; connect-src 'self' https:; report-uri /_/ContentDomainCSP?type=appserver |
| X-Powered-By | Salesforce.com ApexPages |
| P3P | CP="CUR OTR STA" |
| Content-Language | en-US |
| Expires | Thu, 01 Jan 1970 00:00:00 GMT |
| X-XSS-Protection | 0 |
| X-FRAME-OPTIONS | SAMEORIGIN |
| Content-Type | text/html;charset=UTF-8 |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |
| Transfer-Encoding | chunked |