HTTP/1.1 200 OK
Server: nginx/1.17.0
Date: Sat, 29 Jun 2019 10:33:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 29 Jun 2019 05:32:24 GMT
Cache-Control: max-age=0
Expires: Sat, 29 Jun 2019 09:49:38 GMT
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Referrer-Policy: strict-origin
Access-Control-Allow-Origin: https://martinbaileyphotography.com
X-Frame-Options: sameorigin
X-Powered-By: MBP
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Feature-Policy: accelerometer 'none'; camera 'none'; geolocation 'self'; gyroscope 'none'; magnetometer 'none'; microphone 'self'; payment 'self'; usb 'none'
Content-Security-Policy: default-src 'self' data: https: https://cdn.martinbaileyphotography.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://cdn.martinbaileyphotography.com https://api.taxamo.com https://services.taxamo.com https://ssl.google-analytics.com ; img-src * data: https: ; style-src 'self' 'unsafe-inline' https: data: https://cdn.martinbaileyphotography.com https://pro.fontawesome.com ; font-src 'self' https: data: https://cdn.martinbaileyphotography.com ; frame-src 'self' https://*.taxamo.com https://www.facebook.com https://www.google.com https://*.paypal.com https://www.paypalobjects.com https://*.squareup.com https://www.speakpipe.com https://player.vimeo.com https://*.youtube.com https://platform.twitter.com https://staticxx.facebook.com https://cdn-images.mailchimp.com https://smartslider3.com ; child-src 'self' https://*.taxamo.com https://*.facebook.com https://www.google.com https://*.paypal.com https://*.squareup.com https://www.speakpipe.com https://player.vimeo.com https://*.youtube.com https://platform.twitter.com https://*.mailchimp.com ; form-action 'self' https://cdn.martinbaileyphotography.com https://mc.us1.list-manage.com https://*.taxamo.com https://accounts.google.com; connect-src 'self' https://pci-connect.squareup.com https://ssl.google-analytics.com https://www.uptimiarum.eu https://*.facebook.com https://*.paypal.com https://yoast.com https://my.yoast.com/ https://api.mixpanel.com https://stats.g.doubleclick.net ; upgrade-insecure-requests; report-uri https://mbpkk.report-uri.com/r/d/csp/enforce
Report-To: {'group':'default','max_age':31536000,'endpoints':[{'url':'https://mbpkk.report-uri.com/a/d/g'}],'include_subdomains':true}
Expect-CT: max-age=1800, enforce, report-uri="https://mbpkk.report-uri.com/r/d/ct/enforce"
NEL: {'report_to':'default','max_age':31536000,'include_subdomains':true}
X-Proxy-Cache: HIT