HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store
Content-Language: en-US
Content-Security-Policy: default-src 'self' 'unsafe-inline' assets.mybalsamiq.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' assets.mybalsamiq.com *.pubnub.com www.google-analytics.com ssl.google-analytics.com cdn.datatables.net js.stripe.com cdn.loop11.com www.loop11.com; style-src 'self' 'unsafe-inline' assets.mybalsamiq.com cdn.datatables.net balsamiq.com media.balsamiq.com fonts.googleapis.com cdn.loop11.com ; font-src 'self' assets.mybalsamiq.com media.balsamiq.com balsamiq.com fonts.googleapis.com fonts.gstatic.com ; img-src 'self' data: assets.mybalsamiq.com media.balsamiq.com balsamiq.com q.stripe.com ; connect-src 'self' assets.mybalsamiq.com www.mybalsamiq.com media.balsamiq.com *.pubnub.com cdn.loop11.com www.loop11.com; child-src 'self' assets.mybalsamiq.com www.youtube.com js.stripe.com ; frame-src 'self' assets.mybalsamiq.com www.youtube.com js.stripe.com ; report-uri https://balsamiq.report-uri.io/r/default/csp/enforce ;
Date: Mon, 01 Jul 2019 03:44:18 GMT
Expires: Sun, 30 Jun 2019 03:44:18 GMT
Pragma: no-cache
Server: Apache
Set-Cookie: JSESSIONID=1F71C8571D8C33604189CDA04D31C76F-n4; Domain=.mybalsamiq.com; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Cache: Miss from cloudfront
Via: 1.1 40c3aaa12a54f0b84c0f7eef3c4ad111.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DFW3-C1
X-Amz-Cf-Id: EzgxSStu5ZagRUo-pHdKiMT7w4rd5p-gc6la0p3dejuOuT5Qu1u7bA==