HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Server: nginx
Cache-Control: max-age=1800, public
Content-Security-Policy-Report-Only: default-src https: 'self' *.publishing.service.gov.uk *.dev.gov.uk; img-src 'self' data: *.publishing.service.gov.uk *.dev.gov.uk www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net assets.digital.cabinet-office.gov.uk; script-src 'self' *.publishing.service.gov.uk *.dev.gov.uk www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net www.signin.service.gov.uk *.ytimg.com www.youtube.com www.youtube-nocookie.com 'unsafe-inline'; style-src 'self' *.publishing.service.gov.uk *.dev.gov.uk 'unsafe-inline'; font-src 'self' *.publishing.service.gov.uk *.dev.gov.uk data:; connect-src 'self' *.publishing.service.gov.uk *.dev.gov.uk www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net www.tax.service.gov.uk www.signin.service.gov.uk; object-src 'none'; frame-src 'self' *.publishing.service.gov.uk *.dev.gov.uk www.youtube.com www.youtube-nocookie.com; report-uri https://jhpno0hk6b.execute-api.eu-west-2.amazonaws.com/production
Etag: W/"987f66edf32c2bf866ce4cc84ba52963"
Strict-Transport-Security: max-age=31536000; preload
Via: 1.1 router
X-Frame-Options: ALLOWALL
X-Request-Id: a5b70fbc-e9a4-4cd5-bfeb-f3aa30480e13
Via: 1.1 varnish
Link: <https://assets.publishing.service.gov.uk>; rel=preconnect; crossorigin
Fastly-Backend-Name: origin
Content-Length: 33810
Accept-Ranges: bytes
Date: Sun, 11 Aug 2019 04:36:38 GMT
Via: 1.1 varnish
Age: 572
Connection: keep-alive
Set-Cookie: ABTest-FinderAnswerABTest=B; secure; expires=Sun, 22 Sep 2019 04:36:38 GMT; path=/
Set-Cookie: ABTest-SearchClusterQueryABTest=A; secure; expires=Mon, 12 Aug 2019 04:36:38 GMT; path=/
Set-Cookie: TLSversion=TLSv1.2; secure
X-Served-By: cache-dal21238-DAL
X-Cache: HIT, HIT
X-Cache-Hits: 1
X-Timer: S1565498199.903349,VS0,VE0
Vary: Accept-Encoding, Accept-Encoding