| Cache-Control | no-cache |
| Content-Security-Policy | connect-src wss://*.bitwage.com:3001 https://*.bitwage.com:3001 wss://*.firebaseio.com wss://ws.blockchain.info/inv wss://socket.blockcypher.com/v1/btc/main https://www.googleapis.com https://securetoken.googleapis.com http://localhost:26080/ https://www.inwage.com https://www.inwage.biz https://inwagelanding-dot-bitwage-qa.appspot.com/ https://blockchain.info https://blocktrail.com https://api.blocktrail.com/v1/ https://api.blockcypher.com/v1/ ; script-src 'unsafe-inline' 'unsafe-eval' https://js.stripe.com http://www.google.com https://www.google.com/ https://www.googleadservices.com/ https://www.gstatic.com/ https://apis.google.com/ https://www.google-analytics.com/ https://connect.facebook.net/ 'self' https://ssl.google-analytics.com https://storage.googleapis.com https://*.firebaseio.com http://localhost:26080/ https://www.inwage.com https://www.inwage.biz https://inwagelanding-dot-bitwage-qa.appspot.com/ https://*.siftscience.com/ ; object-src 'self' blob: ; frame-src https://js.stripe.com https://*.firebaseio.com https://www.google.com/ http://www.youtube.com/embed/ https://googleads.g.doubleclick.net/ https://www.youtube.com/embed/; default-src 'unsafe-inline'; media-src 'self' blob: ; font-src data://* http://localhost:26080/ https://www.inwage.com https://www.inwage.biz https://inwagelanding-dot-bitwage-qa.appspot.com/ ; style-src 'unsafe-inline' https://www.google.com/ https://storage.googleapis.com http://localhost:26080/ https://www.inwage.com https://www.inwage.biz https://inwagelanding-dot-bitwage-qa.appspot.com/ ; img-src 'self' data: https://q.stripe.com https://bitwage.s3.amazonaws.com https://www.facebook.com/tr/ https://stats.g.doubleclick.net/ https://chart.googleapis.com/ http://ssl.gstatic.com/ https://ssl.gstatic.com/ http://www.google.com https://community.bitwage.com https://www.google.com https://*.siftscience.com/ https://maps.googleapis.com https://storage.googleapis.com https://hexagon-analytics.com https://ssl.google-analytics.com https://chart.googleapis.com/chart http://localhost:26080/ https://www.inwage.com https://www.inwage.biz https://inwagelanding-dot-bitwage-qa.appspot.com/ https://staging.identitymind.com/ https://edna.identitymind.com/ https://www.google-analytics.com/ https://api.screenshotlayer.com/api/ |
| X-Frame-Options | sameorigin |
| X-Content-Type-Options | nosniff |
| Strict-Transport-Security | max-age=31536000 |
| Content-Type | text/html; charset=utf-8 |
| X-XSS-Protection | 1; mode=block |
| Pragma | no-cache |
| X-Permitted-Cross-Domain-Policies | master-only |
| Expires | -1 |
| Access-Control-Allow-Origin | * |
| Content-Encoding | gzip |
| X-Cloud-Trace-Context | efa5641764496f58216977822ed0fb40;o=1 |
| Vary | Accept-Encoding |
| Server | Google Frontend |
| Transfer-Encoding | chunked |