HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 53511
Connection: keep-alive
Cache-Control: max-age=30,s-maxage=300
Content-Security-Policy: default-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com maxcdn.bootstrapcdn.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net; base-uri 'self'; child-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com maxcdn.bootstrapcdn.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net www.google.com https://vars.hotjar.com; style-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com maxcdn.bootstrapcdn.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net 'unsafe-inline' *.typekit.net; connect-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com maxcdn.bootstrapcdn.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com; img-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com maxcdn.bootstrapcdn.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net data: localhost stats.g.doubleclick.net via.placeholder.com biglotteryfund-assets.imgix.net https://insights.hotjar.com http://static.hotjar.com https://static.hotjar.com; script-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com maxcdn.bootstrapcdn.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net 'unsafe-eval' 'unsafe-inline' http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com 'unsafe-eval' 'unsafe-inline'; font-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com maxcdn.bootstrapcdn.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net data: use.typekit.net http://static.hotjar.com https://static.hotjar.com; report-uri https://sentry.io/api/226416/csp-report/?sentry_key=53aa5923a25c43cd9a645d9207ae5b6c
Date: Fri, 17 May 2019 04:17:57 GMT
ETag: W/"d107-hLW+X0xrehhLrAilU09ssQ7fdIg"
Status: 200 OK
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: on
X-Download-Options: noopen
X-Forwarded-Proto: https
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Vary: Accept-Encoding,Accept-Encoding,Cookie
X-Cache: Miss from cloudfront
Via: 1.1 9ecc03b2c7594e8fcc014b8995d49867.cloudfront.net (CloudFront)
X-Amz-Cf-Id: oEXG2liQ51yOv4zC4cFhZMgctxe6oBzZaTfgUUeoYgFHoawctiHntQ==