| Server | openresty |
| Content-Type | text/html; charset=utf-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Content-Security-Policy | default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://*.paypal.com https://getpocket.com https://cardlife.blog https://*.cardlife.blog https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://app.zencoder.com 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com |
| X-Frame-Options | sameorigin |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 1; mode=block |
| X-UA-Compatible | IE=edge, Chrome=1 |
| X-Powered-By | Medium |
| X-Obvious-Tid | 1520959895350:63490c74a5cb |
| X-Obvious-Info | 32949,ecab76ae048 |
| Cache-Control | no-cache, no-store, max-age=0, must-revalidate |
| Expires | Thu, 09 Sep 1999 09:09:09 GMT |
| Pragma | no-cache |
| Tk | T |
| Content-Encoding | gzip |