HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 55361
Content-Type: text/html; charset=utf-8
X-Frame-Options: SameOrigin
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' https://www.edinburghcastle.gov.uk https://player.vimeo.com http://www.googleadservices.com http://platform.twitter.com https://static.ads-twitter.com https://az416426.vo.msecnd.net https://s.ytimg.com https://www.youtube.com/iframe_api https://use.typekit.net https://ajax.googleapis.com https://dc.services.visualstudio.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://maps.googleapis.com https://www.google.co.uk https://googleads.g.doubleclick.net http://connect.facebook.net https://analytics.twitter.com https://www.google.com https://www.gstatic.com https://cdn.siteimprove.net https://my2.siteimprove.com https://id.siteimprove.com https://www.youtube.com;style-src 'self' 'unsafe-inline' https://www.edinburghcastle.gov.uk https://hesprodedincastle.blob.core.windows.net https://www.edinburghcastle.scot https://use.typekit.net https://tagmanager.google.com https://fonts.googleapis.com https://cloud.typography.com http://fast.fonts.net https://cdn.siteimprove.net https://my2.siteimprove.com https://id.siteimprove.com https://www.youtube.com;img-src 'self' https://www.edinburghcastle.gov.uk https://hesprodedincastle.blob.core.windows.net data: https://secure.adnxs.com https://p.typekit.net https://csi.gstatic.com https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://stats.g.doubleclick.net https://www.google.com https://www.google.co.uk umbraco.tv *.umbraco.tv i.ytimg.com *.umbraco.org www.gravatar.com http://umbraco.tv https://www.facebook.com http://t.co https://www.youtube.com https://blog.edinburghcastle.scot https://hesevents-qa-sdk.azurewebsites.net https://events-prod-sdk.azurewebsites.net;media-src 'self' https://www.edinburghcastle.gov.uk https://hesprodedincastle.blob.core.windows.net;font-src 'self' https://www.edinburghcastle.gov.uk data: https://use.typekit.net https://fonts.gstatic.com https://cloud.typography.com http://fast.fonts.net;connect-src 'self' https://dc.services.visualstudio.com https://vimeo.com https://cdn.siteimprove.net https://my2.siteimprove.com https://id.siteimprove.com https://www.youtube.com;child-src 'self' https://my2.siteimprove.com https://player.vimeo.com https://www.youtube.com https://connect.facebook.net https://www.google.com;report-uri https://stormid.report-uri.com/r/d/csp/enforce
Request-Context: appId=cid-v1:7f25bc01-d454-4841-a55a-4f61d40441cf
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Set-Cookie: ARRAffinity=7d3d769ddd898adad8d06a7fa8abd349f7707351aff1b46d4d3e9ddaa2f08d99;Path=/;HttpOnly;Domain=www.edinburghcastle.scot
Date: Sat, 25 May 2019 23:41:13 GMT