Cache-Control | no-cache, no-store |
Pragma | no-cache |
Content-Type | text/html; charset=utf-8 |
Expires | -1 |
X-Content-Type-Options | nosniff |
X-Frame-Options | DENY |
Strict-Transport-Security | max-age=10368000;includeSubDomains |
X-XSS-Protection | 1; mode=block |
Public-Key-Pins | max-age=604800;pin-sha1='4224a4bfa8744ccf433ea81a6322f6e6987f14aa';pin-sha256='ec83c9f398af8178f2bd827549c8ece02069ea760d0070276cf77e834c5ca641'; report-uri=/CSPReporting/PublicKeyPinsURI; |
X-WebKit-CSP | script-src 'self' https://ukup01.nccgroup.trust https://naup01.nccgroup.trust https://www.gstatic.com https://ssl.gstatic.com https://apis.google.com/ https://www.google.com; style-src 'self' 'unsafe-inline' https://ukup01.nccgroup.trust https://naup01.nccgroup.trust; img-src 'self' data: https://ssl.gstatic.com http://ssl.gstatic.com; frame-src 'self' https://ukup01.nccgroup.trust https://naup01.nccgroup.trust https://www.google.com; report-uri https://cspreporting.nccgroup.trust/CSPReporting/XWebKitCSPURI |
X-Content-Security-Policy | script-src 'self' https://ukup01.nccgroup.trust https://naup01.nccgroup.trust https://www.gstatic.com https://ssl.gstatic.com https://apis.google.com/ https://www.google.com; style-src 'self' 'unsafe-inline' https://ukup01.nccgroup.trust https://naup01.nccgroup.trust; img-src 'self' data: https://ssl.gstatic.com http://ssl.gstatic.com; frame-src 'self' https://ukup01.nccgroup.trust https://naup01.nccgroup.trust https://www.google.com; report-uri https://cspreporting.nccgroup.trust/CSPReporting/XContentSecurityPolicyURI |
Content-Security-Policy | default-src 'self'; script-src 'self' https://ukup01.nccgroup.trust https://naup01.nccgroup.trust https://www.gstatic.com https://ssl.gstatic.com https://apis.google.com/ https://www.google.com; style-src 'self' 'unsafe-inline' https://ukup01.nccgroup.trust https://naup01.nccgroup.trust; img-src 'self' data: https://ssl.gstatic.com http://ssl.gstatic.com; frame-src 'self' https://ukup01.nccgroup.trust https://naup01.nccgroup.trust https://www.google.com; report-uri https://cspreporting.nccgroup.trust/CSPReporting/ContentSecurityPolicyURI |
Content-Security-Policy-Report-Only | default-src 'self'; script-src 'self' https://ukup01.nccgroup.trust https://naup01.nccgroup.trust https://www.gstatic.com https://ssl.gstatic.com https://apis.google.com/ https://www.google.com; style-src 'self' 'unsafe-inline' https://ukup01.nccgroup.trust https://naup01.nccgroup.trust; img-src 'self' data: https://ssl.gstatic.com http://ssl.gstatic.com; frame-src 'self' https://ukup01.nccgroup.trust https://naup01.nccgroup.trust https://www.google.com; report-uri https://cspreporting.nccgroup.trust/CSPReporting/CSPReportOnlyURI |
Content-Length | 10139 |