| Server | nginx |
| Content-Type | text/html; charset=utf-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| X-Recruiting | If you are reading this, maybe you should be working at PayPal instead! Check out https://www.paypal.com/us/webapps/mpp/paypal-jobs |
| Paypal-Debug-Id | 3b5ae5d0ea5a0 |
| Cache-Control | no-cache |
| X-XSS-Protection | 1; mode=block |
| X-FRAME-OPTIONS | SAMEORIGIN |
| Strict-Transport-Security | max-age=63072000; includeSubDomains; preload |
| Content-Security-Policy | default-src 'self' https://*.google-analytics.com https://*.paypal.com https://*.paypalobjects.com http://*.paypalobjects.com 'unsafe-inline' https://appsforoffice.microsoft.com http://ajax.aspnetcdn.com https://telemetryservice.firstpartyapps.oaspapps.com/; script-src 'self' https://nexus.ensighten.com https://*.google-analytics.com https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval' https://appsforoffice.microsoft.com http://ajax.aspnetcdn.com https://telemetryservice.firstpartyapps.oaspapps.com/; img-src * blob: data:; object-src 'self' https://*.paypal.com https://*.paypalobjects.com; font-src 'self' https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com 'unsafe-inline'; |
| Content-Encoding | gzip |