| Age | 0 |
| Content-Encoding | gzip |
| Content-Security-Policy | media-src 'self' *.pinimg.com blob:; object-src 'self' h.online-metrix.net; connect-src 'self' *.pinimg.com *.pinterest.com pinterest-media-upload.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net ; script-src 'nonce-MxQiPKyqcs' 'strict-dynamic' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.googleapis.com *.gstatic.com *.accountkit.com *.facebook.com www.googleadservices.com googleads.g.doubleclick.net platform.twitter.com *.online-metrix.net *.bnc.lt bnc.lt *.yozio.com cdn.ampproject.org radar.cedexis.com *.cedexis-test.com 'unsafe-inline' 'unsafe-eval'; base-uri 'none'; report-uri /_/_/csp_report/ |
| Content-Type | text/html; charset=utf-8 |
| P3P | CP="This is not a P3P policy. See https://www.pinterest.com/_/_/help/articles/pinterest-and-p3p for more info." |
| Strict-Transport-Security | max-age=63072000; includeSubDomains; preload |
| X-Content-Type-Options | nosniff |
| X-Frame-Options | SAMEORIGIN |
| X-Pinterest-RID | 990201566706 |
| X-UA-Compatible | IE=edge |
| X-XSS-Protection | 1; mode=block |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Vary | User-Agent, Cookie, Accept-Encoding |
| Pinterest-Generated-By | coreapp-webapp-prod-0a01491a |
| Pinterest-Version | de5fb4a |