| Accept-Ranges | bytes |
| Content-Encoding | gzip |
| Content-Language | id |
| Content-Security-Policy-Report-Only | default-src 'self' blob:; script-src 'self' 'unsafe-eval' https: www.google.com tags.tiqcdn.com secure.insightexpressai.com browser-update.org *.newrelic.com *.nr-data.net api.swiftype.com onqblog.disqus.com a.disquscdn.com platform.twitter.com snapdragonblog.disqus.com http://gateway.answerscloud.com http://s.cr-nielsen.com; object-src t.hypers.com.cn; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: www.qualcomm.com pt-corpmktg.qualcomm.com qualcomm.sc.omtrdc.net sb.scorecardresearch.com metrics.brightcove.com *.nr-data.net analytics.twitter.com t.co controller.4seeresults.com events.foreseeresults.com; frame-src 'self' https: www.youtube.com disqus.com http://gateway.answerscloud.com t.hypers.com.cn; font-src 'self' data: https: vjs.zencdn.net; connect-src 'self' https: *.nr-data.net links.services.disqus.com; report-uri /user |
| Content-Type | text/html |
| X-Content-Security-Policy-Report-Only | default-src 'self' blob:; script-src 'self' 'unsafe-eval' https: www.google.com tags.tiqcdn.com secure.insightexpressai.com browser-update.org *.newrelic.com *.nr-data.net api.swiftype.com onqblog.disqus.com a.disquscdn.com platform.twitter.com snapdragonblog.disqus.com http://gateway.answerscloud.com http://s.cr-nielsen.com; object-src t.hypers.com.cn; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: www.qualcomm.com pt-corpmktg.qualcomm.com qualcomm.sc.omtrdc.net sb.scorecardresearch.com metrics.brightcove.com *.nr-data.net analytics.twitter.com t.co controller.4seeresults.com events.foreseeresults.com; frame-src 'self' https: www.youtube.com disqus.com http://gateway.answerscloud.com t.hypers.com.cn; font-src 'self' data: https: vjs.zencdn.net; connect-src 'self' https: *.nr-data.net links.services.disqus.com; report-uri /user |
| X-Content-Type-Options | nosniff |
| X-Frame-Options | SameOrigin |
| X-Powered-By | Express |
| X-Varnish | 5441990 |
| X-WebKit-CSP-Report-Only | default-src 'self' blob:; script-src 'self' 'unsafe-eval' https: www.google.com tags.tiqcdn.com secure.insightexpressai.com browser-update.org *.newrelic.com *.nr-data.net api.swiftype.com onqblog.disqus.com a.disquscdn.com platform.twitter.com snapdragonblog.disqus.com http://gateway.answerscloud.com http://s.cr-nielsen.com; object-src t.hypers.com.cn; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: www.qualcomm.com pt-corpmktg.qualcomm.com qualcomm.sc.omtrdc.net sb.scorecardresearch.com metrics.brightcove.com *.nr-data.net analytics.twitter.com t.co controller.4seeresults.com events.foreseeresults.com; frame-src 'self' https: www.youtube.com disqus.com http://gateway.answerscloud.com t.hypers.com.cn; font-src 'self' data: https: vjs.zencdn.net; connect-src 'self' https: *.nr-data.net links.services.disqus.com; report-uri /user |
| Cache-Control | must-revalidate, max-age=28800 |
| Connection | keep-alive |
| Vary | Accept-Encoding |