HTTP/1.1 200 OK
Cache-Control: public, max-age=600
Content-Type: text/html; charset=utf-8
Expires: Wed, 17 Jul 2019 02:08:52 GMT
Vary: Accept-Encoding
Set-Cookie: ASP.NET_SessionId=vixboxlqguvvvwog1k5dyjkv; path=/; secure; HttpOnly; SameSite=strict
Set-Cookie: __NFAntiCsrfToken=xg4uKEsQA8CnST3bzzE+TXKpxDZaK7hOaIWfJvrU5sB6sXfXeOdUGg==; path=/; secure; HttpOnly; SameSite=strict
X-Frame-Options: ALLOW-FROM niagarafalls.ca
Content-Security-Policy: base-uri 'self' about:;block-all-mixed-content;child-src www.fallsviewer.ca 'self';connect-src 'self' data: *.youtube.com fonts.gstatic.com stats.g.doubleclick.net *.googleapis.com *.google-analytics.com *.readspeaker.com img.niagarafalls.ca cdn.monsido.com *.smartlook.com;default-src https: 'unsafe-inline' 'unsafe-eval' 'self';font-src 'self' null fonts.gstatic.com niagarafalls.ca;form-action 'self' *.paypal.com *.readspeaker.com niagarafalls.ca;frame-ancestors 'self' www.fallsviewer.ca niagarafalls.ca *.us.monsido.com; frame-src *.fallsviewer.ca *.readspeaker.com www.google.com www.youtube.com player.vimeo.com niagarafalls.ca *.transitapp.com ;img-src data: 'self' img.niagarafalls.ca *.readspeaker.com https://www.google-analytics.com *.gstatic.com stats.g.doubleclick.net www.youtube.com *.monsido.com *.googleapis.com https://*.google.com https://*.google.ca;media-src *.readspeaker.com youtu.be youtube.com;object-src *.youtube.com 'self'; report-uri https://niagarafalls.ca/webservices/csp-enforce;script-src 'self' blob: *.google.com *.googleapis.com *.googletagmanager.com www.google-analytics.com connect.facebook.net *.smartlook.com extend.vimeocdn.com player.vimeo.com *.readspeaker.com cdn.monsido.com www.youtube.com api.transitapp.com *.ytimg.com 'unsafe-inline' 'unsafe-eval';style-src 'self' *.googleapis.com *.google.com *.readspeaker.com 'unsafe-inline';upgrade-insecure-requests;
X-Content-Security-Policy: base-uri 'self' about:;block-all-mixed-content;child-src www.fallsviewer.ca 'self';connect-src 'self' data: *.youtube.com fonts.gstatic.com stats.g.doubleclick.net *.googleapis.com *.google-analytics.com *.readspeaker.com img.niagarafalls.ca cdn.monsido.com *.smartlook.com;default-src https: 'unsafe-inline' 'unsafe-eval' 'self';font-src 'self' null fonts.gstatic.com niagarafalls.ca;form-action 'self' *.paypal.com *.readspeaker.com niagarafalls.ca;frame-ancestors 'self' www.fallsviewer.ca niagarafalls.ca *.us.monsido.com; frame-src *.fallsviewer.ca *.readspeaker.com www.google.com www.youtube.com player.vimeo.com niagarafalls.ca *.transitapp.com ;img-src data: 'self' img.niagarafalls.ca *.readspeaker.com https://www.google-analytics.com *.gstatic.com stats.g.doubleclick.net www.youtube.com *.monsido.com *.googleapis.com https://*.google.com https://*.google.ca;media-src *.readspeaker.com youtu.be youtube.com;object-src *.youtube.com 'self'; report-uri https://niagarafalls.ca/webservices/csp-enforce;script-src 'self' blob: *.google.com *.googleapis.com *.googletagmanager.com www.google-analytics.com connect.facebook.net *.smartlook.com extend.vimeocdn.com player.vimeo.com *.readspeaker.com cdn.monsido.com www.youtube.com api.transitapp.com *.ytimg.com 'unsafe-inline' 'unsafe-eval';style-src 'self' *.googleapis.com *.google.com *.readspeaker.com 'unsafe-inline';upgrade-insecure-requests;
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer, same-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
Date: Wed, 17 Jul 2019 01:58:52 GMT
Content-Length: 38504