HTTP/1.1 200 OK
Date: Fri, 03 Jun 2022 16:41:46 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 88616
Connection: keep-alive
Keep-Alive: timeout=120
Vary: Accept-Encoding
Set-Cookie: ASP.NET_SessionId=5isaoniie3eau545kjtloh45; path=/; HttpOnly
Cache-Control: private
Server: rocket
Strict-Transport-Security: max-age=63072000
Content-Security-Policy: frame-ancestors 'self' *.scot.nhs.uk *.nhsgrampian.org; upgrade-insecure-requests; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report-block; report-to csp-endpoint-block
Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: logger.scot.nhs.uk *.google-analytics.com www.googletagmanager.com *.fontawesome.com use.typekit.net *.google.com *.google.co.uk *.googleapis.com themes.googleusercontent.com *.gstatic.com code.jquery.com yui.yahooapis.com *.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net unpkg.com *.amazonaws.com *.addthis.com *.addthisedge.com *.twitter.com *.twimg.com *.facebook.com *.facebook.net static.xx.fbcdn.net *.youtube.com youtu.be *.ytimg.com www.youtube-nocookie.com player.vimeo.com i.vimeocdn.com cdn.jwplayer.com content.jwplatform.com prd.jwpltx.com *.jwpcdn.com *.jwpsrv.com *.civiccomputing.com cc.cdn.civiccomputing.com secure.gravatar.com public.tableau.com www.openstreetmap.org browser-update.org s.w.org www.geoplugin.net www.careopinion.org.uk static.addtoany.com *.wp.com www.patientopinion.org.uk hcaptcha.com *.hcaptcha.com assets.nhs.uk www.travelinescotland.com www.travelinescotland.com w.soundcloud.com embeds.audioboom.com fast.wistia.net *.wistia.com embedwistia-a.akamaihd.net; worker-src 'self' www.google.com; frame-ancestors 'self'; base-uri 'self'; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report; report-to csp-endpoint
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=(), interest-cohort=()
Expect-CT: enforce, max-age=2592000, report-uri="https://web-reports.scot.nhs.uk/api/v1/expect-ct-report"
Report-To: {'endpoints': [{'url': 'https://web-reports.scot.nhs.uk/api/v1/csp-report'}], 'group': 'csp-endpoint', 'include_subdomains': false, 'max-age': 2592000}, {'endpoints': [{'url': 'https://web-reports.scot.nhs.uk/api/v1/csp-report-block'}], 'group': 'csp-endpoint-block', 'include_subdomains': false, 'max-age': 2592000}, {'endpoints': [{'url': 'https://showteam.report-uri.com/a/d/g'}], 'group': 'nel-endpoint', 'include_subdomains': false, 'max-age': 30}
NEL: {"include_subdomains": false, "max_age": 30, "report_to": "nel-endpoint"}
Cache-Control: no-transform