HTTP/1.1 200 OK
Date: Sat, 18 May 2019 05:14:31 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d9523bcfc4feda721303e9bc9ed525eb81558156470; expires=Sun, 17-May-20 05:14:30 GMT; path=/; domain=.burpple.com; HttpOnly; Secure
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: current_city_id=1; path=/; secure; HttpOnly; SameSite=Lax
X-Request-Id: 2aa08b88-ed2e-4b9e-b418-a03a2d6e979e
X-Runtime: 0.358055
X-Rack-Cache: miss
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31557600; includeSubDomains
Content-Security-Policy: default-src https: 'self' blob:; base-uri https: 'self' optimize.google.com; block-all-mixed-content; child-src https: 'self' blob: *.chope.co *.deliveroo.com.sg *.facebook.com *.facebook.net *.google.com *.googletagmanager.com *.instagram.com *.pinterest.com *.quandoo.sg *.twitter.com; connect-src wss: https: 'self' connect.facebook.net *.facebook.com *.xx.fbcdn.net *.google.com performance.typekit.net syndication.twitter.com api.amplitude.com *.tiles.mapbox.com api.mapbox.com; font-src https: data: 'self' fonts.googleapis.com fonts.gstatic.com *.typekit.net; form-action https: 'self'; frame-ancestors https: 'self'; img-src https: 'self' data: blob: mediastream: s3.amazonaws.com s3.burpple.com *.cloudfront.net *.facebook.com *.xx.fbcdn.net *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com burpple-staging.herokuapp.com *.imgix.net *.pinterest.com *.twitter.com *.files.wordpress.com *.typekit.net; manifest-src 'self' https:; media-src blob: https:; object-src https: 'self'; script-src https: 'self' blob: 'unsafe-inline' 'unsafe-eval' *.cloudflare.com *.cloudfront.net *.facebook.net *.xx.fbcdn.net *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com burpple-staging.herokuapp.com *.newrelic.com *.nr-data.net *.pinterest.com *.twitter.com *.typekit.net; style-src https: 'self' 'unsafe-inline' *.cloudfront.net *.facebook.com *.xx.fbcdn.net *.googleapis.com *.gstatic.com burpple-staging.herokuapp.com; worker-src https: 'self' blob:
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin, no-referrer-when-downgrade
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 1; mode=block
Via: 1.1 vegur, 1.1 59b18e94cdbd74e6e6557d7131e02ebd.cloudfront.net (CloudFront)
X-Cache: Miss from cloudfront
X-Amz-Cf-Id: S2WwfucNUROiGkP3-T7K7LqSd_p_siUOe5IUvfZvHM2J0JGq9LugxQ==
set-cookie: _Burpple_session=OVVTbk0vUXZOZEk4TkFiYjRGQnFuRXIydFJXbC92Y1FESUxBUXFGUWFZbytWbCtVakluak1OWmltOTY5QTRXTUxhQks4eWFMOExWZ2d6LzlhbmZqRWVlYkxwUWcrVTQ4akUydm5pNXR3dXVQSjZxV29KenNRUmdWVEdMSHNCdUtqSnVPQk9DYzlkSEtDRFNyQU9WYlFqQlp6QlpQem5iZ05wWGYzVTJSanVmR1NzdVJBcHhGNlQwZHhvQUNXcWxualVyd1J2YjY4VmtReXlSb0MxWVFWOEdWaTl3dG85RFV5Tkh2a2tXbGsxd1dsc01qUnRpQXgvMTdjY3lRaFVleC0tam1rd1BNSDZOZ3A3SCs3dThPVXY4UT09--2c9ab0a8d260984fe9d7327e1ab63731cfb775d2; path=/; secure; HttpOnly; SameSite=Lax
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4d8b59168c2a7b04-MCI