HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 31 Jul 2019 03:17:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy-Report-Only: default-src https: 'unsafe-inline' 'unsafe-eval' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com:* https://www.google-analytics.com:*; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com:*; img-src * ; font-src 'self' https://fonts.googleapis.com:* https://fonts.gstatic.com:*; connect-src 'self' https://www.google-analytics.com:*; media-src 'self' ; child-src 'none' ; frame-src 'none' ; frame-ancestors 'none' ; form-action 'self' ; upgrade-insecure-requests; base-uri 'self'; report-uri https://snkhan.report-uri.com/r/d/csp/enforce;
Cache-Control: public, must-revalidate
Expires: Tue, 29 Oct 2019 03:17:24 GMT
Vary: User-Agent,Accept-Encoding
Strict-Transport-Security: max-age=15768000
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Language: en-GB