HTTP/1.1 200 OK
Date: Sat, 18 Apr 2020 10:36:33 GMT
Server: nginx
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Referrer-Policy: same-origin
Cache-Control: public; max-age=31536000
Content-Type: text/html; charset=UTF-8
X-Powered-By: PHP/7.4.4
X-Frame-Options: SAMEORIGIN
X-Pingback: https://flexicar.com.au/xmlrpc.php
Link: <https://flexicar.com.au/wp-json/>; rel="https://api.w.org/"
Link: <https://flexicar.com.au/>; rel=shortlink
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Security-Policy: default-src 'none';                                 base-uri 'none';                                 connect-src 'self' *.flexicar.com.au flexicar.com.au;                                 font-src 'self' *.typekit.net *.gstatic.com data:;                                 form-action 'self';                                 frame-ancestors 'self';                                 frame-src 'self' *.vimeo.com; 				img-src 'self' *.gravatar.com *.gstatic.com *.google.com *.googleapis.com *.youtube.com hertz-australia.eileo.org ps.w.org data:;                                 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com *.google.com *.googleapis.com *.w3.org *.flexicar.com.au;                                 style-src 'self' 'unsafe-inline';                                 style-src-elem 'self' 'unsafe-inline' *.typekit.net *.googleapis.com;                                 upgrade-insecure-requests                                 
Transfer-Encoding: chunked