| X-Frame-Options | SAMEORIGIN |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 1; mode=block |
| X-Served-By | main.d0ffd916-26e.prod-bf1-1 |
| X-Instance | e1076.cn.paas.bf1.yahoo.com |
| Cache-Control | no-cache, max-age=0, must-revalidate, no-store |
| Pragma | no-cache |
| X-Request-Id | 5921bde7 |
| Content-Security-Policy | style-src 'unsafe-inline' https://*.flickr.com https://s.yimg.com https://cdn.yahooapis.com https://yui-s.yahooapis.com https://de.adserver.yahoo.com https://fc.yahoo.com https://*.braintreegateway.com https://*.paypalobjects.com https://www.paypal.com https://radar.cedexis.com; default-src https://*.flickr.com https://*.staticflickr.com; img-src data: blob: https://*.flickr.com https://*.staticflickr.com https://ec.yimg.com https://s.yimg.com https://geo.yahoo.com https://de.adserver.yahoo.com https://lh.secure.yahoo.com https://sb.scorecardresearch.com https://image.maps.api.here.com https://*.paypal.com https://*.pinterest.com http://*.static-alpha.flickr.com; media-src https://*.flickr.com https://*.staticflickr.com https://s.yimg.com https://*.http.atlas.cdn.yimg.com http://*.static-alpha.flickr.com; script-src 'unsafe-eval' 'unsafe-inline' 'nonce-04687f12f9d183980322a0810121c7d0' https://*.flickr.com https://s.yimg.com https://cdn.yahooapis.com https://yui-s.yahooapis.com https://de.adserver.yahoo.com https://fc.yahoo.com https://*.braintreegateway.com https://*.paypalobjects.com https://www.paypal.com https://radar.cedexis.com; connect-src https://*.flickr.com https://s.yimg.com https://geo.query.yahoo.com https://cdn.yahooapis.com https://yui-s.yahooapis.com http://api.flickr.com https://*.pinterest.com https://geo.yahoo.com https://*.cedexis-radar.net https://rpt.cedexis.com https://*.sandbox.braintreegateway.com https://*.braintreegateway.com; frame-src https://*.braintreegateway.com https://*.sandbox.braintreegateway.com https://assets.braintreegateway.com/ https://*.paypalobjects.com https://y-flickr.yahoo.com https://*.flickr.com https://s.yimg.com https://de.adserver.yahoo.com; child-src https://*.braintreegateway.com https://*.sandbox.braintreegateway.com https://assets.braintreegateway.com/ https://*.paypalobjects.com https://y-flickr.yahoo.com https://*.flickr.com https://s.yimg.com https://de.adserver.yahoo.com; font-src https://s.yimg.com https://*.flickr.com; report-uri https://csp.flickr.com/beacon/csp?src=adsecflickr; |
| Content-Security-Policy-Report-Only | style-src 'unsafe-inline' https://*.flickr.com https://s.yimg.com https://cdn.yahooapis.com https://yui-s.yahooapis.com https://de.adserver.yahoo.com https://fc.yahoo.com https://js.braintreegateway.com https://api.braintreegateway.com https://radar.cedexis.com; default-src https://*.flickr.com https://*.staticflickr.com; img-src data: blob: https://*.flickr.com https://*.staticflickr.com https://ec.yimg.com https://s.yimg.com https://geo.yahoo.com https://de.adserver.yahoo.com https://lh.secure.yahoo.com https://sb.scorecardresearch.com https://image.maps.api.here.com http://*.static-alpha.flickr.com; media-src https://*.flickr.com https://*.staticflickr.com https://s.yimg.com https://*.http.atlas.cdn.yimg.com http://*.static-alpha.flickr.com; script-src 'unsafe-eval' 'unsafe-inline' 'nonce-04687f12f9d183980322a0810121c7d0' 'strict-dynamic' https://*.flickr.com https://s.yimg.com https://cdn.yahooapis.com https://yui-s.yahooapis.com https://de.adserver.yahoo.com https://fc.yahoo.com https://js.braintreegateway.com https://api.braintreegateway.com https://radar.cedexis.com; connect-src https://*.flickr.com https://s.yimg.com https://geo.query.yahoo.com https://cdn.yahooapis.com https://yui-s.yahooapis.com https://api.flickr.com https://geo.yahoo.com https://*.cedexis-radar.net https://rpt.cedexis.com https://radar.cedexis.com https://*.sandbox.braintreegateway.com https://*.braintreegateway.com; frame-src https://assets.braintreegateway.com https://js.braintreegateway.com https://api.braintreegateway.com https://y-flickr.yahoo.com https://*.flickr.com https://s.yimg.com https://de.adserver.yahoo.com; child-src https://assets.braintreegateway.com https://js.braintreegateway.com https://api.braintreegateway.com https://y-flickr.yahoo.com https://*.flickr.com https://s.yimg.com https://de.adserver.yahoo.com; font-src https://s.yimg.com https://*.flickr.com; report-uri https://csp.flickr.com/beacon/csp?src=adsecflickrreport; |
| X-Powered-By | Express |
| Content-Type | text/html; charset=utf-8 |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |
| x-mh2-env | flickr.hermes;webproductionv1;prod_bf1_1;d0ffd916-26ee-11e8-913a-d4ae5297450a;main |
| Age | 0 |
| Via | http/1.1 a99.ue.bf1.yahoo.net (ApacheTrafficServer [cMsSf ]), http/1.1 fts107.flickr.bf1.yahoo.com (ApacheTrafficServer [cMsSf ]), https/1.1 e3.ycpi.dca.yahoo.com (ApacheTrafficServer [cMsSf ]) |
| Server | ATS |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Strict-Transport-Security | max-age=15552000 |
| Expect-CT | max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" |
| Public-Key-Pins-Report-Only | max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="dolnbtzEBnELx/9lOEQ22e6OZO/QNb6VSSX2XHA3E7A="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only" |