Cache-Control | no-cache, no-store, must-revalidate |
Pragma | no-cache |
Content-Type | text/html; charset=utf-8 |
Content-Encoding | deflate |
Expires | -1 |
Vary | Accept-Encoding |
Server | |
X-Frame-Options | SAMEORIGIN |
X-UA-Compatible | IE=Edge |
Request-Context | appId=cid-v1:f262dcd1-e5b5-4a29-bea9-2e2b3fdf7cf5 |
Content-Security-Policy | child-src 'self' *.bugherd.com *.google.com syndication.twitter.com *.facebook.com connect.facebook.net platform.twitter.com player.vimeo.com s7.addthis.com embed.youtube.com www.youtube.com *.webspellchecker.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.bugherd.com *.s3.amazonaws.com connect.facebook.net m.addthisedge.com m.addthis.com maps.googleapis.com maps.google.com s7.addthis.com fonts.googleapis.com apis.google.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com platform.twitter.com cdn.syndication.twimg.com *.webspellchecker.net; |
Strict-Transport-Security | max-age=15552001; includeSubDomains; preload |
X-Xss-Protection | 1; mode=block |
X-Content-Type-Options | nosniff |
Referrer-Policy | no-referrer-when-downgrade |