| Server | Apache |
| X-Content-Type-Options | nosniff |
| X-Frame-Options | SAMEORIGIN |
| Expires | Thu, 19 Nov 1981 08:52:00 GMT |
| Cache-Control | no-cache, no-store, must-revalidate, private, no-store, no-cache, must-revalidate |
| Pragma | no-cache, no-cache |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |
| X-XSS-Protection | 1; mode=block; |
| Strict-Transport-Security | max-age=31536000 |
| Content-Security-Policy | default-src 'self'; font-src *; img-src data: 'self' *.lytics.io *.lytics.com *.demdex.net *.datatables.net lacek.hs.llnwd.net *.everesttech.net/ *.google.com *.g.doubleclick.net https://www.facebook.com https://s-static.ak.facebook.com/ *.enterprise.com *.google-analytics.com *.twitter.com t.co *.coremetrics.com *.enterprise.com; media-src *; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.lytics.io *.lytics.com use.typekit.net *.google-analytics.com *.datatables.net ajax.googleapis.com/ opnstk-dev.lacek.net:10082 *.cloudflare.com *.doubleclick.net *.googletagmanager.com *.google-analytics.com/ *.demdex.net/ connect.facebook.net *.googleapis.com *.google-analytics.com *.adobedtm.com *.twitter.com ; style-src 'self' 'unsafe-inline' *.lytics.io *.lytics.com *.cloudflare.com/ *.datatables.net hello.myfonts.net *.googleapis.com *.gstatic.com; child-src *.adobedtm.com *.fls.doubleclick.net *.ak.facebook.com www.facebook.com; frame-src *.lytics.io *.lytics.com opnstk-dev.lacek.net:10082 *.enterprise.demdex.net *.youtube.com assets.adobedtm.com *.fls.doubleclick.net *.ak.facebook.com https://consent.truste.com www.facebook.com; connect-src 'self' *.google-analytics.com *.enterprise.com *.demdex.net; |
| Referrer-Policy | origin |
| Keep-Alive | timeout=5, max=100 |
| Connection | Keep-Alive |
| Content-Type | text/html; charset=UTF-8 |