Server | nginx |
Content-Type | text/html |
Transfer-Encoding | chunked |
Connection | keep-alive |
X-Frame-Options | SAMEORIGIN |
Expires | Sat, 01 Jan 2000 00:00:01 GMT |
Cache-Control | post-check=0, pre-check=0, max-age=0 |
Pragma | no-cache |
Last-Modified | Sat, 30 Sep 2017 11:30:54 GMT |
X-XSS-Protection | 1; mode=block |
X-Content-Type-Options | nosniff |
Content-Security-Policy | script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com js.stripe.com www.google.com/recaptcha/api.js services.postcodeanywhere.co.uk/js/captureplus-2.20.min.js www.google.com/recaptcha/api.js www.gstatic.com www.google-analytics.com/analytics.js js-agent.newrelic.com bam.nr-data.net; object-src 'self' |
Vary | Accept-Encoding |
Content-Encoding | gzip |