HTTP/1.1 200 OK
Cache-Control: public, max-age=30
Content-Type: text/html; charset=utf-8
Expires: Fri, 13 Sep 2019 10:31:37 GMT
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' https://*.authorize.net https://*.paypal.com *.vimeo.com *.vimeocdn.com *.akamaized.net seal.godaddy.com *.google-analytics.com www.geoplugin.net 'unsafe-inline'; object-src 'self' https://*.authorize.net *.vimeo.com *.vimeocdn.com *.akamaized.net; style-src 'self' https://* 'unsafe-inline'; child-src 'self' https://*.authorize.net https://*.paypal.com *.vimeo.com *.vimeocdn.com *.akamaized.net; frame-src 'self' https://*.authorize.net https://*.paypal.com *.vimeo.com *.vimeocdn.com *.akamaized.net www.youtube.co; frame-ancestors 'self' https://*.authorize.net *.vimeo.com *.vimeocdn.com *.akamaized.net; media-src 'self' *.vimeo.com *.vimeocdn.com *.akamaized.net; img-src 'self' http://* https://* https://*.paypal.com *.vimeo.com *.vimeocdn.com *.akamaized.net; connect-src 'self' https://*.authorize.net *.vimeo.com *.vimeocdn.com *.akamaized.net 'unsafe-inline'; report-uri /CSP.aspx/CSPReport
Feature-Policy: autoplay *; speaker *; fullscreen *; payment 'self'; geolocation 'none';
Referrer-Policy: no-referrer-when-downgrade
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
Date: Fri, 13 Sep 2019 10:31:07 GMT
Content-Length: 27685