HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: SNAP
X-Powered-By: POP
X-Powered-By-Plesk: PleskWin
Content-Security-Policy:               default-src 'self'  https://bid.g.doubleclick.net;               base-uri 'self';              block-all-mixed-content;              connect-src 'self' https://pagead2.googlesyndication.com services.postcodeanywhere.co.uk https://www.google.com/ads/ https://www.google.co.uk/ads/ https://www.google-analytics.com ;                          img-src 'self' data: *.canalholidays.com  https://pagead2.googlesyndication.com https://csi.gstatic.com mt.googleapis.com csi.gstatic.com maps.gstatic.com              https://maps.googleapis.com maps.google.com https://maps.google.com https://googleads.g.doubleclick.net https://www.google.com www.google-analytics.com https://stats.g.doubleclick.net              https://www.google.co.uk *.ggpht.com *.googleapis.com www.googletagmanager.com;                                   style-src 'self'  fonts.googleapis.com fonts.gstatic.com https://tagmanager.google.com/debug/css.css 'unsafe-inline';                          script-src 'self' https://www.canalholidays.com https://code.jquery.com www.googletagmanager.com www.google-analytics.com www.googleadservices.com              https://googleads.g.doubleclick.net https://maps.google.com  maps.google.com              *.googleapis.com tagmanager.google.com https://www.google.com https://www.google.co.uk 'unsafe-inline' 'unsafe-eval';                          font-src 'self' fonts.googleapis.com fonts.gstatic.com;              frame-ancestors 'self';
X-Frame-Options: SAMEORIGIN
 X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-ASPNET-VERSION: CRACKLE
Date: Sun, 19 May 2019 08:44:41 GMT
Content-Length: 50145