HTTP/1.1 200 OK
Date: Wed, 11 Dec 2019 19:29:57 GMT
Server: Apache
x-cache-handler: wp
X-Content-Type-Options: nosniff
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Tue, 10 Dec 2019 10:40:20 GMT
Vary: Accept-Encoding,User-Agent
Cache-Control: private, must-revalidate
Expires: Wed, 11 Dec 2019 19:29:57 GMT
Access-Control-Allow-Origin: https://www.fireworks.co.uk
Access-Control-Allow-Methods: GET
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: on
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Security-Policy: default-src 'unsafe-inline' 'unsafe-eval' data: blob: https://www.fireworks.co.uk/ https://static.fireworks.co.uk/ https://cdn.jsdelivr.net/ https://secure.gravatar.com https://player.vimeo.com/ https://www.google-analytics.com https://*.google.com https://www.gstatic.com https://www.paypalobjects.com https://*.paypal.com https://ak1s.abmr.net https://*.youtube.com/ https://s.ytimg.com/ https://platform.twitter.com/ https://maxcdn.bootstrapcdn.com/  https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://ton.twimg.com https://cdn.syndication.twimg.com/ https://syndication.twitter.com/ https://abs.twimg.com/ https://pbs.twimg.com/ https://*.googleapis.com https://*.gstatic.com https://*.amazonaws.com https://*.wp.com https://*.wp.org https://*.w.com https://*.w.org wss://*.wordpress.com https://wordpress.com https://woocommerce.com https://*.staticflickr.com https://*.flickr.com/
Referrer-Policy: no-referrer-when-downgrade
Feature-Policy: accelerometer 'self'; ambient-light-sensor 'self'; autoplay 'self'; camera 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; gyroscope 'self'; magnetometer 'self'; microphone 'self'; midi 'self'; payment 'self'; picture-in-picture 'self'; speaker 'self'; sync-xhr 'self'; usb 'self'; vr 'self'
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Content-Language: en