HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en-US
Content-Security-Policy-Report-Only: connect-src 'self' https://busun.org; default-src 'none'; font-src 'self' https://busun.org https://fonts.googleapis.com https://fonts.gstatic.com; frame-src 'none'; img-src 'self' data: https://busun.org https://storage.googleapis.com https://maps.googleapis.com https://maps.gstatic.com; manifest-src 'none'; media-src 'none'; object-src 'none'; script-src 'self' https://busun.org https://maps.googleapis.com https://sentry.io; style-src 'self' https://busun.org https://fonts.googleapis.com; worker-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri https://brownmun.report-uri.com/r/d/csp/reportOnly
Content-Type: text/html;charset=UTF-8
Date: Sat, 19 Oct 2019 09:22:50 GMT
Expect-Ct: max-age=172800, report-uri="https://brownmun.report-uri.com/r/d/ct/reportOnly"
Expires: 0
Feature-Policy: accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; camera 'none'; encrypted-media 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; speaker 'self'; usb 'none'; vibrate 'none'; vr 'none'
Pragma: no-cache
Referrer-Policy: no-referrer
Set-Cookie: JSESSIONID=97466C15C209D8AFFB814CBA30BD7D47; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Transfer-Encoding: chunked