HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.16
Cache-Control: must-revalidate, no-cache, private
Date: Fri, 07 May 2021 01:55:26 GMT
X-Drupal-Dynamic-Cache: MISS
Link: <https://footballfoundation.org.uk/>; rel="canonical", <https://footballfoundation.org.uk/>; rel="shortlink"
Link: <https://footballfoundation.org.uk/node/7>; rel="revision"
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
X-Generator: Drupal 9 (https://www.drupal.org)
X-Drupal-Cache: HIT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' *.adsymptotic.com *.linkedin.com *.licdn.com *.facebook.com *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.xbox-interactive.com tagmanager.google.com api.getaddress.io static.addtoany.com connect.facebook.net d10lpsik1i8c69.cloudfront.net 'unsafe-inline'; style-src 'self' fonts.googleapis.com fonts.gstatic.com tagmanager.google.com d10lpsik1i8c69.cloudfront.net *.xbox-interactive.com 'unsafe-inline'; font-src 'self' fonts.googleapis.com fonts fonts.gstatic.com d10lpsik1i8c69.cloudfront.net *.xbox-interactive.com data:; img-src 'self' *.adsymptotic.com *.linkedin.com *.licdn.com *.facebook.com *.google-analytics.com *.gstatic.com *.googleapis.com s3-eu-west-1.amazonaws.com *.cdninstagram.com d10lpsik1i8c69.cloudfront.net *.xbox-interactive.com data:; frame-src *; connect-src *
Referrer-Policy: strict-origin-when-cross-origin
Feature-Policy: geolocation 'self'; camera 'none';