| Server | nginx/1.10.3 (Ubuntu) |
| Content-Type | text/html; charset=utf-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| X-DNS-Prefetch-Control | off |
| X-Frame-Options | SAMEORIGIN |
| Strict-Transport-Security | max-age=15552000; includeSubDomains |
| X-Download-Options | noopen |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 1; mode=block |
| Referrer-Policy | no-referrer |
| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' localhost:* 127.0.0.1:* ajax.googleapis.com www.google-analytics.com cdnjs.cloudflare.com maps.googleapis.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com; img-src 'self' data: www.google-analytics.com twemoji.maxcdn.com scontent.cdninstagram.com i.imgur.com i.ytimg.com images.contentful.com maps.googleapis.com maps.gstatic.com csi.gstatic.com; media-src 'self'; connect-src 'self' ws://localhost:* 127.0.0.1:* api.github.com; object-src 'none'; frame-src www.youtube.com; sandbox allow-same-origin allow-forms allow-scripts allow-popups allow-presentation; report-uri /report-violation |
| ETag | W/"a810-4WiASbMqtJamGo5Xwb/48QI2nAc" |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |