HTTP/1.1 200 OK
Date: Thu, 18 Mar 2021 11:56:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dba6487098353f907f4b99914e51ca6691616068610; expires=Sat, 17-Apr-21 11:56:50 GMT; path=/; Domain=www.hackerone.com; HttpOnly; SameSite=Lax; Secure
Expires: Sun, 18 Apr 2021 11:56:50 GMT
Cache-Control: public, max-age=2678400
X-Drupal-Dynamic-Cache: MISS
Link: <https://www.hackerone.com/>; rel="canonical", <https://www.hackerone.com/>; rel="shortlink"
Link: <https://www.hackerone.com/>; rel="alternate"; hreflang="en"
Link: <https://www.hackerone.com/home>; rel="revision"
X-UA-Compatible: IE=edge
Content-language: en
X-Frame-Options: DENY
Last-Modified: Thu, 18 Mar 2021 03:47:02 GMT
ETag: W/"1616039222"
X-Generator: Drupal 9 (https://www.drupal.org)
Content-Security-Policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src blob: js.driftt.com *.youtube-nocookie.com *.marketo.com; connect-src 'self' *.6sc.co *.6sense.com *.company-target.com *.google-analytics.com *.litix.io *.mktoresp.com *.mktoutil.com *.stripe.com *.wistia.com s3.amazonaws.com api.lever.co embedwistia-a.akamaihd.net hackerone.com secure.adnxs.com stats.g.doubleclick.net; font-src 'self' data: fonts.gstatic.com *.typekit.net; form-action 'self' *.marketo.com *.twitter.com; frame-ancestors 'self'; frame-src 'self' fast.wistia.com js.driftt.com *.youtube.com *.youtube-nocookie.com *.marketo.com *.twitter.com my.pima.app; object-src 'self'; img-src 'self' data: *.6sc.co *.adsymptotic.com *.bidr.io *.company-target.com *.google-analytics.com *.google.com *.linkedin.com *.techtarget.com *.twimg.com *.twitter.com s3.amazonaws.com cdn.bizible.com cdn.bizibly.com cdn.ttgtmedia.com embed-fastly.wistia.com embedwistia-a.akamaihd.net fast.wistia.com id.rlcdn.com stats.g.doubleclick.net t.co via.placeholder.com https://*.googletagmanager.com; media-src 'self' blob: data: *.wistia.com s3.amazonaws.com embedwistia-a.akamaihd.net; script-src 'self' 'sha256-GIzg/vN5a9TbTavbaC/fu8ZDVJriAcj3NVOm9O9Ez7g=' 'sha256-njEVDP22SRLTbvkBGYBk/bZxj3vsHZe/TM7+ykFIPtk=' 'sha256-chw1FVji+ddLlO/RrcP3fhKOLsJUUh+FaKbjsOC2BiQ=' 'sha256-D6d37gZGDMRuNu3bDdYkGuOfCaaNGdTrB3eF5d5IU/Y=' 'sha256-XrP50Mq6s78GLH2Vyt4BfKhn8rx4OdU6FYqQGbxRuZc=' *.6sc.co *.ads-twitter.com *.cloudflare.com *.demandbase.com *.google-analytics.com *.linkedin.com *.techtarget.com *.twitter.com *.marketo.com *.ads-twitter.com s3.amazonaws.com cdn.bizible.com cdn.syndication.twimg.com fast.wistia.com js.driftt.com munchkin.marketo.net snap.licdn.com unpkg.com https://*.googletagmanager.com; style-src 'self' 'unsafe-inline' *.twitter.com *.marketo.com s3.amazonaws.com checkout.stripe.com fast.wistia.com fonts.googleapis.com *.typekit.net; report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598
X-Drupal-Cache: HIT
X-Request-ID: v-b0e9ce6c-879c-11eb-a530-bfcf4b918b45
X-AH-Environment: prod
X-Geo-Country: US
Vary: Cookie,X-Geo-Country
Referrer-Policy: no-referrer-when-downgrade
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Expect-CT: enforce, max-age=31536000
Via: varnish
X-Cache: HIT
X-Cache-Hits: 42
CF-Cache-Status: MISS
cf-request-id: 08e6cb21840000fbac4eb50000000001
Server: cloudflare
CF-RAY: 631e47af3d61fbac-MCI