strict-transport-security | max-age=2592000; includeSubDomains |
Content-Security-Policy | script-src 'self' https://*.googleanalytics.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://www.googletagmanager.com/gtm.js https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/ https://www.googleadservices.com; default-src 'self' https://*.gstatic.com; img-src 'self' data: https://s.ytimg.com https://*.googleusercontent.com https://*.gstatic.com https://*.googleapis.com https://*.google-analytics.com https://*.google.com https://stats.g.doubleclick.net/r/collect; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://www.youtube.com https://accounts.google.com https://apis.google.com https://plus.google.com https://*.doubleclick.net; connect-src 'self' https://plus.google.com https://www.google-analytics.com; font-src 'self' data: https://themes.googleusercontent.com https://*.gstatic.com https://*.gstatic.com |
x-content-type-options | nosniff |
Expires | Fri, 10 Nov 2017 12:49:18 GMT |
Content-Language | en-us |
Last-Modified | Fri, 10 Nov 2017 12:47:48 GMT |
x-xss-protection | 1; mode=block |
Cache-Control | public, max-age=90 |
x-frame-options | DENY |
Content-Type | text/html; charset=utf-8 |
Content-Encoding | gzip |
X-Cloud-Trace-Context | d3cd12c37ca300940c5e61efff943341 |
Vary | Accept-Language, Cookie, Accept-Encoding |
Server | Google Frontend |
Alt-Svc | quic=":443"; ma=2592000; v="41,39,38,37,35" |