Expires | Thu, 19 Nov 1981 08:52:00 GMT |
Cache-Control | no-store, no-cache, must-revalidate |
Pragma | no-cache |
Vary | Accept-Encoding |
X-Frame-Options | sameorigin |
Access-Control-Allow-Origin | * |
Access-Control-Allow-Headers | Origin, X-Requested-With, Content-Type, Accept |
Content-Security-Policy | default-src 'none';script-src 'self' *.google.co.uk *.adalyser.com *.doubleclick.net *.cloudfront.net *.userreplay.net *.wp.com *.ytimg.com *.youtube.com *.instagram.com *.cloudflare.com *.googleapis.com *.trustpilot.com *.vwo.com *.visualwebsiteoptimizer.com *.liveperson.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.quantserve.com *.usabilla.com *.google.com *.omguk.com *.lpsnmedia.net *.dwin1.com *.awin1.com *.zenaps.com *.adnxs.com *.tvsquared.com 'unsafe-inline' 'unsafe-eval';style-src 'self' *.jsdelivr.net *.ionicframework.com *.cloudflare.com *.bootstrapcdn.com *.google.com *.googleapis.com 'unsafe-inline';frame-src 'self' *.userreplay.net *.vimeo.com *.youtube.com *.doubleclick.net *.lpsnmedia.net *.liveperson.net *.trustpilot.com *.awin1.com *.zenaps.com;object-src 'self' *.beaglestreet.com;img-src 'self' *.adalyser.com *.beaglestreet.com *.wp.com *.trustpilot.com *.visualwebsiteoptimizer.com *.beaglestreet.com *.virginmoney.com *.liveperson.net *.google-analytics.com *.quantserve.com *.doubleclick.net *.google.com *.google.co.uk *.gstatic.com *.omguk.com *.lpsnmedia.net *.awin1.com *.zenaps.com *.adnxs.com *.tvsquared.com data:;font-src 'self' *.beaglestreet.com *.jsdelivr.net code.ionicframework.com *.bootstrapcdn.com *.gstatic.com data:;connect-src 'self' *.userreplay.net *.trustpilot.com *.beaglestreet.com;form-action 'self';report-uri /WebResource.axd?cspReport=true |
X-Content-Security-Policy | default-src 'none';script-src 'self' *.google.co.uk *.adalyser.com *.doubleclick.net *.cloudfront.net *.userreplay.net *.wp.com *.ytimg.com *.youtube.com *.instagram.com *.cloudflare.com *.googleapis.com *.trustpilot.com *.vwo.com *.visualwebsiteoptimizer.com *.liveperson.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.quantserve.com *.usabilla.com *.google.com *.omguk.com *.lpsnmedia.net *.dwin1.com *.awin1.com *.zenaps.com *.adnxs.com *.tvsquared.com 'unsafe-inline' 'unsafe-eval';style-src 'self' *.jsdelivr.net *.ionicframework.com *.cloudflare.com *.bootstrapcdn.com *.google.com *.googleapis.com 'unsafe-inline';frame-src 'self' *.userreplay.net *.vimeo.com *.youtube.com *.doubleclick.net *.lpsnmedia.net *.liveperson.net *.trustpilot.com *.awin1.com *.zenaps.com;object-src 'self' *.beaglestreet.com;img-src 'self' *.adalyser.com *.beaglestreet.com *.wp.com *.trustpilot.com *.visualwebsiteoptimizer.com *.beaglestreet.com *.virginmoney.com *.liveperson.net *.google-analytics.com *.quantserve.com *.doubleclick.net *.google.com *.google.co.uk *.gstatic.com *.omguk.com *.lpsnmedia.net *.awin1.com *.zenaps.com *.adnxs.com *.tvsquared.com data:;font-src 'self' *.beaglestreet.com *.jsdelivr.net code.ionicframework.com *.bootstrapcdn.com *.gstatic.com data:;connect-src 'self' *.userreplay.net *.trustpilot.com *.beaglestreet.com;form-action 'self';report-uri /WebResource.axd?cspReport=true |
X-WebKit-CSP | default-src 'none';script-src 'self' *.google.co.uk *.adalyser.com *.doubleclick.net *.userreplay.net *.cloudfront.net *.wp.com *.ytimg.com *.youtube.com *.instagram.com *.cloudflare.com *.googleapis.com *.trustpilot.com *.vwo.com *.visualwebsiteoptimizer.com *.liveperson.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.quantserve.com *.usabilla.com *.google.com *.omguk.com *.lpsnmedia.net *.dwin1.com *.awin1.com *.zenaps.com *.adnxs.com *.tvsquared.com 'unsafe-inline' 'unsafe-eval';style-src 'self' *.jsdelivr.net *.ionicframework.com *.cloudflare.com *.bootstrapcdn.com *.google.com *.googleapis.com 'unsafe-inline';frame-src 'self' *.userreplay.net *.vimeo.com *.youtube.com *.doubleclick.net *.lpsnmedia.net *.liveperson.net *.trustpilot.com *.awin1.com *.zenaps.com;object-src 'self' *.beaglestreet.com;img-src 'self' *.adalyser.com *.beaglestreet.com *.wp.com *.trustpilot.com *.visualwebsiteoptimizer.com *.beaglestreet.com *.virginmoney.com *.liveperson.net *.google-analytics.com *.quantserve.com *.doubleclick.net *.google.com *.google.co.uk *.gstatic.com *.omguk.com *.lpsnmedia.net *.awin1.com *.zenaps.com *.adnxs.com *.tvsquared.com data:;font-src 'self' *.beaglestreet.com *.jsdelivr.net code.ionicframework.com *.bootstrapcdn.com *.gstatic.com data:;connect-src 'self' *.userreplay.net *.trustpilot.com *.beaglestreet.com;form-action 'self';report-uri /WebResource.axd?cspReport=true |
X-Content-Type-Options | nosniff |
X-XSS-Protection | 1; mode=block |
Strict-Transport-Security | max-age=631138519; includeSubDomains |
Keep-Alive | timeout=5, max=100 |
Connection | Keep-Alive |
Content-Type | text/html; charset=UTF-8 |
Content-Encoding | gzip |
Transfer-Encoding | chunked |