| Cache-Control | private |
| Content-Type | text/html; charset=utf-8 |
| Content-Encoding | gzip |
| Vary | Accept-Encoding |
| Server | Microsoft-IIS/8.0 |
| X-AspNetMvc-Version | 5.2 |
| X-AspNet-Version | 4.0.30319 |
| X-Powered-By | ASP.NET |
| X-Content-Type-Options | nosniff |
| Content-Security-Policy | frame-ancestors prod.uhrs.playmsn.com; default-src 'self' https://mp-prod-cdn.azureedge.net https://unpkg.com; img-src 'self' data: https://mp-prod-cdn.azureedge.net https://www.facebook.com https://csi.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mp-prod-cdn.azureedge.net https://unpkg.com https://cdnjs.cloudflare.com https://connect.facebook.net https://platform.linkedin.com https://*.getclicky.com https://*.vo.msecnd.net https://localhost:* https://maps.googleapis.com;frame-src 'self' https://staticxx.facebook.com https://mp-prod-cdn.azureedge.net https://unpkg.com https://mp-prod-cdn.azureedge.net; child-src 'self' https://staticxx.facebook.com https://mp-prod-cdn.azureedge.net; style-src 'self' 'unsafe-inline' https://mp-prod-cdn.azureedge.net;connect-src 'self' https://mp-prod-cdn.azureedge.net https://unpkg.com https://dc.services.visualstudio.com https://localhost:* wss://localhost:* https://maps.googleapis.com |
| X-Content-Security-Policy | frame-ancestors prod.uhrs.playmsn.com; default-src 'self' https://mp-prod-cdn.azureedge.net https://unpkg.com; img-src 'self' data: https://mp-prod-cdn.azureedge.net https://www.facebook.com https://csi.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mp-prod-cdn.azureedge.net https://unpkg.com https://cdnjs.cloudflare.com https://connect.facebook.net https://platform.linkedin.com https://*.getclicky.com https://*.vo.msecnd.net https://localhost:* https://maps.googleapis.com;frame-src 'self' https://staticxx.facebook.com https://mp-prod-cdn.azureedge.net https://unpkg.com https://mp-prod-cdn.azureedge.net; child-src 'self' https://staticxx.facebook.com https://mp-prod-cdn.azureedge.net; style-src 'self' 'unsafe-inline' https://mp-prod-cdn.azureedge.net;connect-src 'self' https://mp-prod-cdn.azureedge.net https://unpkg.com https://dc.services.visualstudio.com https://localhost:* wss://localhost:* https://maps.googleapis.com |
| X-Frame-Options | ALLOW-FROM https://prod.uhrs.playmsn.com/ |
| Strict-Transport-Security | max-age=31536000 |