| Accept-Ranges | bytes |
| Content-Security-Policy | default-src 'self' *.optimizely.com *.appdynamics.com *.googletagmanager.com *.macquarie.com *.macquarie.com.au; script-src 'self' https://*.optimizely.com http://www.googletagmanager.com https://www.googletagmanager.com http://www.google-analytics.com https://www.google-analytics.com http://cdn.appdynamics.com https://cdn.appdynamics.com https://geocoderweb.veda.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' https://*.macquarie.com https://*.macquarie.com.au http://col.eum-appdynamics.com https://col.eum-appdynamics.com https://*.optimizely.com 'unsafe-inline'; img-src 'self' data: http://*.macquarie.com http://*.macquarie.com.au https://col.eum-appdynamics.com *.google-analytics.com https://*.amazonaws.com https://*.optimizely.com; frame-src 'self' *.optimizely.com *.appdynamics.com; frame-ancestors 'self' *.optimizely.com *.appdynamics.com |
| Content-Type | text/html; charset=UTF-8 |
| Last-Modified | Wed, 03 Jan 2018 10:47:56 GMT |
| Strict-Transport-Security | max-age=31536000, max-age=31536000 |
| X-Content-Security-Policy | default-src 'self' *.optimizely.com *.appdynamics.com *.googletagmanager.com *.macquarie.com *.macquarie.com.au; script-src 'self' https://*.optimizely.com http://www.googletagmanager.com https://www.googletagmanager.com http://www.google-analytics.com https://www.google-analytics.com http://cdn.appdynamics.com https://cdn.appdynamics.com https://geocoderweb.veda.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' https://*.macquarie.com https://*.macquarie.com.au http://col.eum-appdynamics.com https://col.eum-appdynamics.com https://*.optimizely.com 'unsafe-inline'; img-src 'self' data: http://*.macquarie.com http://*.macquarie.com.au https://col.eum-appdynamics.com *.google-analytics.com https://*.amazonaws.com https://*.optimizely.com; frame-src 'self' *.optimizely.com *.appdynamics.com; frame-ancestors 'self' *.optimizely.com *.appdynamics.com |
| X-Content-Type-Options | nosniff |
| X-Frame-Options | ALLOW-FROM https://app.optimizely.com |
| X-WebKit-CSP | default-src 'self' *.optimizely.com *.appdynamics.com *.googletagmanager.com *.macquarie.com *.macquarie.com.au; script-src 'self' https://*.optimizely.com http://www.googletagmanager.com https://www.googletagmanager.com http://www.google-analytics.com https://www.google-analytics.com http://cdn.appdynamics.com https://cdn.appdynamics.com https://geocoderweb.veda.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' https://*.macquarie.com https://*.macquarie.com.au http://col.eum-appdynamics.com https://col.eum-appdynamics.com https://*.optimizely.com 'unsafe-inline'; img-src 'self' data: http://*.macquarie.com http://*.macquarie.com.au https://col.eum-appdynamics.com *.google-analytics.com https://*.amazonaws.com https://*.optimizely.com; frame-src 'self' *.optimizely.com *.appdynamics.com; frame-ancestors 'self' *.optimizely.com *.appdynamics.com |
| X-XSS-Protection | 1; mode=block |
| Content-Length | 47731 |
| Connection | keep-alive |