Cache-Control | no-cache |
Content-Encoding | gzip |
Content-Security-Policy-Report-Only | default-src 'self' d3gz8szwkk2g10.cloudfront.net https://floodioproductionassets.global.ssl.fastly.net 'unsafe-inline' 'unsafe-eval'; connect-src 'self' wss://* ws://* api.rollbar.com api.pin.net.au *.intercom.io *.pusher.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' d3gz8szwkk2g10.cloudfront.net d2flbx086t62yn.cloudfront.net https://fonts.googleapis.com https://fonts.gstatic.com https://floodioproductionassets.global.ssl.fastly.net data:; frame-src 'self' 'unsafe-inline' 'unsafe-eval' d3gz8szwkk2g10.cloudfront.net d2flbx086t62yn.cloudfront.net https://floodioproductionassets.global.ssl.fastly.net; img-src 'self' d3gz8szwkk2g10.cloudfront.net d2flbx086t62yn.cloudfront.net s3.amazonaws.com *.google-analytics.com bam.nr-data.net *.intercomcdn.com *.pingdom.net t.co *.twitter.com *.adroll.com www.facebook.com *.doubleclick.net *.adnxs.com www.google.com/ads www.google.com.*/ads ads.yahoo.com x.bidswitch.net *.rlcdn.com *.openx.net https://floodioproductionassets.global.ssl.fastly.net data:; media-src 'self' d3gz8szwkk2g10.cloudfront.net https://floodioproductionassets.global.ssl.fastly.net 'unsafe-inline' 'unsafe-eval'; object-src 'self' d3gz8szwkk2g10.cloudfront.net https://floodioproductionassets.global.ssl.fastly.net 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' t.co *.twitter.com d3gz8szwkk2g10.cloudfront.net d2flbx086t62yn.cloudfront.net *.google-analytics.com *.newrelic.com d37gvrvc0wt4s1.cloudfront.net api.pin.net.au *.intercomcdn.com *.intercom.io *.pingdom.net http://fonts.googleapis.com https://*.adroll.com *.pusher.com https://floodioproductionassets.global.ssl.fastly.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' d3gz8szwkk2g10.cloudfront.net d2flbx086t62yn.cloudfront.net fonts.googleapis.com *.intercomcdn.com https://floodioproductionassets.global.ssl.fastly.net; report-uri /content_security_policy/report; |
Content-Type | text/html; charset=utf-8 |
Front-End-Https | on |
Server | nginx |
Status | 200 OK |
Strict-Transport-Security | max-age=631152000; includeSubdomains |
X-Content-Type-Options | nosniff |
X-Download-Options | noopen |
X-Frame-Options | DENY |
X-Permitted-Cross-Domain-Policies | none |
X-Request-Id | dfd13d7c-89be-4f23-8a55-1735f1db511f |
X-Runtime | 0.020016 |
X-XSS-Protection | 1; mode=block |
transfer-encoding | chunked |
Connection | keep-alive |