HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Security-Policy: default-src 'none';script-src 'self' 'unsafe-inline' ajax.googleapis.com ajax.aspnetcdn.com fonts.googleapis.com fonts.gstatic.com www.youtube.com s.ytimg.com www.googletagmanager.com vortex.data.microsoft.com *.hscta.net *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com travel.guestrated.com *.mo.gov;object-src none;style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com;img-src 'self' *.google-analytics.com travel.guestrated.com *.google.com *.gstatic.com *.googleapis.com maps.gstatic.com *.mo.gov *.arrivalist.com *.adnxs.com data:;frame-src *.vimeo.com *.youtube.com *.google.com *.arcgis.com *.soundcloud.com *.flipsnack.com;font-src 'self' maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com;connect-src 'self' *.sd.gov localhost:* ws://localhost:* www.google-analytics.com;child-src *.youtube.com *.vimeo.com *.soundcloud.com *.google.com;frame-ancestors *.arcgis.com *.soundcloud.com *.flipsnack.com;report-uri /WebResource.axd?cspReport=true
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
Date: Fri, 24 May 2019 03:48:20 GMT
Connection: close
Content-Length: 28939
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default.src 'self';
Strict-Transport-Security: max-age=2592000