| Server | nginx/1.6.2 |
| Content-Type | text/html; charset=utf-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-eval' https://js.stripe.com/v2/ https://cdn.jsdelivr.net/octobat.js/latest/ https://s7.addthis.com/ https://m.addthisedge.com/ https://m.addthis.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com/; img-src 'self' https://www.google-analytics.com/; frame-src *; frame-ancestors 'none'; style-src 'self' 'unsafe-inline' https://fast.fonts.net/; connect-src 'self' https://pmgw.octobat.com/ https://m.addthis.com/; |
| Vary | Origin |
| Access-Control-Allow-Credentials | true |
| Access-Control-Allow-Origin | https://ondeviceapp.com |
| Strict-Transport-Security | max-age=31536000; includeSubDomains |
| X-Frame-Options | DENY |
| Content-Encoding | gzip |