HTTP/1.1 200 OK
Server: nginx/1.13.9
Date: Wed, 26 Feb 2020 09:18:23 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 57063
Connection: keep-alive
Content-Security-Policy: default-src 'self' *.innstyle.co.uk/ js.intercomcdn.com/ *.nr-data.net/ blob:; child-src 'self' *.innstyle.co.uk/ *.stripe.com/ vars.hotjar.com/ www.paypal.com/ www.google.com/ calendly.com *.twitter.com/ *.typeform.com/ *.addtoany.com/ eftsecure.callpay.com/ *.chargebee.com headway-widget.net intercom-sheets.com share.intercom.io intercom-reporting.com blob:; connect-src 'self' *.innstyle.co.uk/ *.stripe.com/ www.paypal.com/ *.mapbox.com/ *.intercom.io/ *.giphy.com/ api.getaddress.io/ www.google-analytics.com/ stats.g.doubleclick.net/ api.instagram.com/ insights.hotjar.com/ in.hotjar.com/ *.addtoany.com/ uploads.intercomcdn.com/ *.nr-data.net/ wss:; font-src 'self' *.innstyle.co.uk/ *.stripe.com/ fonts.googleapis.com/ fonts.gstatic.com/ *.bootstrapcdn.com/ js.intercomcdn.com/ data:; frame-ancestors *; img-src 'self' *.innstyle.co.uk/ *.stripe.com/ *.giphy.com/ cdnjs.cloudflare.com/ stats.g.doubleclick.net/ d12i3n67xehmcr.cloudfront.net/ d3uiust7lgvyx0.cloudfront.net/ d1bz4kuoetuc8l.cloudfront.net/ *.google-analytics.com/ *.intercomassets.com/ js.intercomcdn.com/ www.googletagmanager.com/ pixel-geo.prfct.co/ secure.adnxs.com/ track.hubspot.com/ www.google.com/ www.google.co.uk/ s3.amazonaws.com/cb-invoice-logos-prod/ data: blob:; script-src 'self' *.innstyle.co.uk/ *.stripe.com/ www.paypal.com/ www.google.com/ *.twitter.com/ *.ads-twitter.com *.mapbox.com/ stats.g.doubleclick.net/ *.bootstrapcdn.com/ cdnjs.cloudflare.com/ use.fortawesome.com/ *.google-analytics.com/ js.intercomcdn.com/ www.googletagmanager.com/ pixel-geo.prfct.co/ *.instagram.com/ js-agent.newrelic.com/ tag.marinsm.com/ *.hotjar.com/ *.nr-data.net/ www.paypalobjects.com/ ajax.googleapis.com/ use.fonticons.com/ www.google.pl/ www.gstatic.com/ widget.intercom.io/ app.intercom.io assets.calendly.com *.typeform.com/ *.addtoany.com/ services.callpay.com/ext/checkout/v2/checkout.js js.chargebee.com *.nr-data.net cdn.headwayapp.co 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.innstyle.co.uk/ *.stripe.com/ fonts.googleapis.com/ *.bootstrapcdn.com/ cdnjs.cloudflare.com/ use.fortawesome.com/ *.mapbox.com/ assets-cdn.github.com/ github.githubassets.com/ *.dbsoft-booking.co.uk/ *.gstatic.com *.awaywiththekids.co.uk www.mamistravelguide.com visit-east-england.affinityagency.co.uk visiteastofengland.com *.visit-east-england.affinityagency.co.uk *.visiteastofengland.com www.epicurean.club *.chargebee.com cdn.headwayapp.co 'unsafe-inline'; worker-src 'self' *.innstyle.co.uk/ *.stripe.com/ *.mapbox.com/ blob:
Referrer-Policy: no-referrer-when-downgrade
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
ETag: W/"e11209fab4a3553fc005ec56942a2847"
Cache-Control: max-age=0, private, must-revalidate
X-Request-Id: 7fb237e0-f791-4fef-aac0-36d0370d6412
X-Runtime: 0.023773
Strict-Transport-Security: max-age=15552000