HTTP/1.1 200 OK
Date: Sun, 26 Jul 2020 17:24:25 GMT
Server: Apache/2.4.43 (Ubuntu)
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' unsafe-inline https://c0.wp.com https://graph.facebook.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.gstatic.com https://www.google.com https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hsadspixel.net https://js.hsleadflows.net https://js.hs-scripts.com https://s0.wp.com https://stats.wp.com https://static.cloudflareinsights.com 'unsafe-inline'; script-src-elem 'self'; style-src 'self' unsafe-inline https://c0.wp.com https://fonts.googleapis.com 'unsafe-inline'; style-src-elem 'self' unsafe-inline; font-src 'self' https://fonts.gstatic.com data:;  img-src 'self' data: data: https://i0.wp.com https://i1.wp.com https://track.hubspot.com https://forms.hsforms.com https://www.google.com https://www.google.co.th https://pixel.wp.com https://secure.gravatar.com https://i2.wp.com https://www.facebook.com;  connect-src 'self' https://forms.hubspot.com https://api.hubapi.com;  frame-src 'self' https://www.facebook.com;  report-uri https://graphicbuffet.co.th/wp-json/rsssl/v1/csp?rsssl_apitoken=1576136099 
Content-Security-Policy: upgrade-insecure-requests
Expect-CT: max-age=7776000, enforce
X-Frame-Options: sameorigin
Upgrade: h2
Connection: Upgrade, close
Last-Modified: Sun, 26 Jul 2020 16:09:37 GMT
Cache-Control: max-age=0
Expires: Sun, 26 Jul 2020 17:24:25 GMT
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8