| Server | nginx |
| Content-Type | text/html; charset=UTF-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| X-XSS-Protection | 1; mode=block |
| X-Content-Type-Options | nosniff |
| Content-Security-Policy | default-src 'self' https://goshooting.org.uk; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://scd.blazefuture.wpengine.com/ https://code.angularjs.org/ *.twitter.com *.youtube.com https://*.google.com https://*.googleapis.com https://cdn.syndication.twimg.com https://platform.twitter.com https://www.google-analytics.com https://goshooting.org.uk; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.twitter.com *.youtube.com https://*.paypalobjects.com https://*.twimg.com/ https://fonts.googleapis.com https://maps.google.com https://maxcdn.bootstrapcdn.com https://platform.twitter.com https://goshooting.org.uk; img-src 'self' 'unsafe-eval' 'unsafe-inline' *.twitter.com *.youtube.com https://*.googleapis.com/ https://*.gstatic.com https://*.openstreetmap.org https://*.paypalobjects.com https://*.twimg.com https://ak1s.abmr.net https://maps.google.com https://platform.twitter.com https://www.google-analytics.com https://goshooting.org.uk; font-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.twitter.com *.youtube.com https://*.paypalobjects.com https://fonts.gstatic.com https://maps.google.com https://maxcdn.bootstrapcdn.com https://platform.twitter.com https://www.google-analytics.com https://goshooting.org.uk; frame-src 'self' 'unsafe-eval' 'unsafe-inline' *.twitter.com *.youtube.com https://maps.google.com https://platform.twitter.com https://www.google-analytics.com https://goshooting.org.uk; child-src 'self' 'unsafe-eval' 'unsafe-inline' *.twitter.com *.youtube.com https://maps.google.com https://platform.twitter.com https://www.google-analytics.com https://goshooting.org.uk; object-src 'self' 'unsafe-eval' 'unsafe-inline' *.twitter.com *.youtube.com https://maps.google.com https://platform.twitter.com https://www.google-analytics.com https://goshooting.org.uk; connect-src 'self' 'unsafe-eval' 'unsafe-inline' https://scd.blazefuture.wpengine.com https://maps.google.com https://platform.twitter.com https://www.google-analytics.com https://goshooting.org.uk; media-src 'self' 'unsafe-eval' 'unsafe-inline' *.twitter.com *.youtube.com https://maps.google.com https://platform.twitter.com https://www.google-analytics.com https://goshooting.org.uk; form-action 'self' 'unsafe-eval' 'unsafe-inline' https://maps.google.com https://platform.twitter.com https://www.google-analytics.com https://goshooting.org.uk; frame-ancestors 'self' 'unsafe-eval' 'unsafe-inline' *.twitter.com *.youtube.com https://platform.twitter.com https://goshooting.org.uk; report-uri https://goshooting.org.uk?wpcspReceiveCSPviol=1&wpCSPNonce=230df29860 |
| X-Powered-By | PleskLin |
| Public-Key-Pins | pin-sha256="BVcK5usPzrQhDm23lIa3CUyvIAQB4Um2Z3RBtfJeRJs="; pin-sha256="klO23nT2ehFDXCfx3eHTDRESMz3asj1muO+4aIdjiuY="; pin-sha256="LLJNWMylGsLgnNALX2XcbIf45OoxHC7Wjx0C0NjAkbo="; max-age=31536000 |
| Strict-Transport-Security | max-age=63072000; includeSubdomains; |
| X-Frame-Options | SAMEORIGIN, SAMEORIGIN |