HTTP/1.0 200 OK
Content-Type: text/html; charset=utf-8
ETag: "95ecffb5a888d367e32561d5f6a45f2e"
Server: Apache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Language: en
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com tagmanager.google.com optimize.google.com ajax.googleapis.com search.usa.gov api.mapbox.com js-agent.newrelic.com dnn506yrbagrg.cloudfront.net bam.nr-data.net *.youtube.com *.ytimg.com trk.cetrk.com universal.iperceptions.com cdn.mouseflow.com n2.mouseflow.com about: connect.facebook.net www.federalregister.gov storage.googleapis.com api.consumerfinance.gov; style-src 'self' 'unsafe-inline' fast.fonts.net tagmanager.google.com optimize.google.com api.mapbox.com fonts.googleapis.com; default-src 'self'; frame-src 'self' *.googletagmanager.com *.google-analytics.com optimize.google.com www.youtube.com *.doubleclick.net universal.iperceptions.com www.facebook.com staticxx.facebook.com mediasite.yorkcast.com; img-src 'self' www.ecfr.gov s3.amazonaws.com www.gstatic.com ssl.gstatic.com stats.g.doubleclick.net files.consumerfinance.gov img.youtube.com *.google-analytics.com trk.cetrk.com searchstats.usa.gov gtrk.s3.amazonaws.com *.googletagmanager.com tagmanager.google.com maps.googleapis.com optimize.google.com api.mapbox.com *.tiles.mapbox.com stats.search.usa.gov data: www.facebook.com www.gravatar.com; connect-src 'self' *.google-analytics.com *.tiles.mapbox.com bam.nr-data.net files.consumerfinance.gov s3.amazonaws.com public.govdelivery.com n2.mouseflow.com api.iperceptions.com; font-src 'self' data: fast.fonts.net fonts.google.com fonts.gstatic.com files.consumerfinance.gov
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: https://www.consumerfinance.gov
Date: Sun, 19 May 2019 09:21:51 GMT
Connection: close
Strict-Transport-Security: max-age=31536000