HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 May 2019 15:34:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Sucuri-ID: 12004
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: upgrade-insecure-requests;
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Link: <https://basc.org.uk/wp-json/>; rel="https://api.w.org/", <https://basc.org.uk/>; rel=shortlink
Content-Security-Policy: default-src 'self' *.basc.org.uk https://basc.org.uk; connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.google-analytics.com *.google.com *.twitter.com https://*.vimeo.com https://scd.blazefuture.wpengine.com https://basc.org.uk; font-src 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.bootstrapcdn.com *.google-analytics.com *.google.com *.gstatic.com *.paypalobjects.com *.twitter.com *.wpmudev.org *.youtube.com data: https://basc.org.uk; form-action 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.google-analytics.com *.google.com *.twitter.com https://basc.us13.list-manage.com https://www.facebook.com https://www.paypal.com https://www.sional.co.uk https://basc.org.uk; frame-ancestors 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.twitter.com *.youtube.com https://basc.org.uk; frame-src 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.cloudfront.net *.google-analytics.com *.google.com *.twitter.com *.wpmudev.org *.youtube.com https://*.vimeo.com https://staticxx.facebook.com https://www.facebook.com http://www.gunstar.co.uk https://www.media.volvocars.com https://www.sional.co.uk https://basc.org.uk; child-src 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.cloudfront.net *.google-analytics.com *.google.com *.twitter.com *.wpmudev.org *.youtube.com https://*.vimeo.com https://staticxx.facebook.com https://www.facebook.com http://www.gunstar.co.uk https://www.media.volvocars.com https://www.sional.co.uk https://basc.org.uk; img-src 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.facebook.com *.google-analytics.com *.google.com *.googleapis.com/ *.gstatic.com *.openstreetmap.org *.paypalobjects.com *.twimg.com *.twitter.com *.wpmudev.org *.youtube.com *.ytimg.com data: https://badges.instagram.com https://s.w.org https://stats.g.doubleclick.net https://www.moonmodule.com https://basc.org.uk; media-src 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.google-analytics.com *.google.com *.twitter.com *.wpmudev.org *.youtube.com https://*.vimeo.com https://www.sional.co.uk https://basc.org.uk; object-src 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.cloudfront.net *.google-analytics.com *.google.com *.twitter.com *.wpmudev.org *.youtube.com https://*.vimeo.com https://www.sional.co.uk https://basc.org.uk; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.angularjs.org/ *.basc.org.uk *.cloudfront.net *.facebook.net *.google-analytics.com *.google.com *.gstatic.com *.jquery.com *.twitter.com *.wpmudev.org *.youtube.com ajax.googleapis.com apis.google.com maps.googleapis.com https://*.vimeo.com https://basc.us13.list-manage.com https://cdn.syndication.twimg.com https://cdnjs.cloudflare.com https://onesignal.com https://s3.amazonaws.com https://scd.blazefuture.wpengine.com/ https://secure.comodo.com https://sucuri.net https://www.googleapis.com https://www.jqueryscript.net https://www.moonmodule.com https://www.paypal.com https://www.sional.co.uk https://basc.org.uk; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.bootstrapcdn.com *.cloudfront.net *.google.com *.googleapis.com *.gunstar.co.uk *.paypalobjects.com *.twimg.com/ *.twitter.com *.wpmudev.org *.youtube.com https://*.vimeo.com https://cdn-images.mailchimp.com https://sucuri.net https://www.sional.co.uk https://basc.org.uk
Set-Cookie: PHPSESSID=1dtsk2rhkfork3i8l0rsfkeq40; path=/
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Public-Key-Pins: pin-sha256="fHykzJYU4MzC8Cp4LptU1Th6t6lwYwlHAuhf4GDGf+0="; pin-sha256="Fbr/5aSOo4KRal8YE49t4lc76IOnK/oto9NWV1cSKWM="; pin-sha256="grX4Ta9HpZx6tSHkmCrvpApTQGo67CYDnvprLg5yRME="; pin-sha256="wiI3qA5+usYoQ7MpluMNIqvfN+EdSv7GxO5ZnQTOflQ="; pin-sha256="klO23nT2ehFDXCfx3eHTDRESMz3asj1muO+4aIdjiuY="; pin-sha256="2pLvw3NX07QouXh3bc2DCO5ZfJQtygQVVJGnw5x63xI"; pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; max-age=300
Strict-Transport-Security: max-age=63072000; includeSubdomains;
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer-when-downgrade
Feature-Policy: autoplay none; fullscreen *; geolocation *; camera none; payment *; vibrate none; speaker *; push none; notifications none; microphone none; midi none; accelerometer none; ambient-light-sensor *; encrypted-media *; magnetometer none; picture-in-picture *; vr none; usb none; vertical-scroll *; sync-xhr *;
X-Sucuri-Cache: MISS