HTTP/1.1 200 OK
Server: nginx
Date: Fri, 18 Feb 2022 03:39:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 3211
Last-Modified: Fri, 27 Aug 2021 12:32:12 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "6128db4c-c8b"
X-UA-Compatible: IE=edge
X-DNS-Prefetch-Control: off
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://api.jeurissen.co/reports/xss/web/playsprout.industries
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
NEL: {"report_to":"nel-endpoint","max_age":0,"include_subdomains":true}
Cross-Origin-Embedder-Policy: unsafe-none; report-to=coep-endpoint
Cross-Origin-Opener-Policy: same-origin; report-to=coop-endpoint
Report-To: {"group":"csp-endpoint","max_age":0,"include_subdomains":true,"endpoints":[{"url":"https://api.jeurissen.co/reports/csp/playsprout.industries"}]}, {"group":"coop-endpoint","max_age":0,"include_subdomains":true,"endpoints":[{"url":"https://api.jeurissen.co/reports/coop/playsprout.industries"}]}, {"group":"doc-endpoint","max_age":0,"include_subdomains":true,"endpoints":[{"url":"https://api.jeurissen.co/reports/doc/playsprout.industries"}]}, {"group":"coep-endpoint","max_age":0,"include_subdomains":true,"endpoints":[{"url":"https://api.jeurissen.co/reports/coep/playsprout.industries"}]}, {"group":"nel-endpoint","max_age":0,"include_subdomains":true,"endpoints":[{"url":"https://api.jeurissen.co/reports/nel/playsprout.industries"}]}, {"max_age":0,"include_subdomains":true,"endpoints":[{"url":"https://api.jeurissen.co/reports/general/playsprout.industries"}]}
Content-Security-Policy: default-src 'none'; font-src 'self'; img-src 'self' https://www.googletagmanager.com/ https://www.google-analytics.com/; manifest-src 'self'; script-src 'report-sample' 'self' https://www.googletagmanager.com/ https://www.google-analytics.com/; script-src-attr 'none'; style-src 'self' 'unsafe-inline'; connect-src https://api.jeurissen.co/ https://www.google-analytics.com/; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; sandbox allow-same-origin allow-scripts; block-all-mixed-content; upgrade-insecure-requests; worker-src 'report-sample' 'self' https://www.googletagmanager.com/ https://www.google-analytics.com/; frame-src 'none'; object-src 'none'; style-src-attr 'self' 'unsafe-inline'; script-src-elem 'report-sample' 'self' https://www.googletagmanager.com/ https://www.google-analytics.com/; style-src-elem 'self' 'unsafe-inline'; report-uri https://api.jeurissen.co/reports/csp/playsprout.industries; report-to csp-endpoint
Feature-Policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; usb 'none'
Permissions-Policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=()
Document-Policy-Report-Only: unsized-media,unoptimized-images,accelerometer,ambient-light-sensor,document-write,speaker,autoplay,camera,encrypted-media,fullscreen,geolocation,gyroscope,magnetometer,microphone,midi,payment,picture-in-picture,sync-xhr,usb,battery,display-capture,document-domain,layout-animations,legacy-image-formats,oversized-images,publickey-credentials-get,vibrate,vr,wake-lock,web-share,xr-spatial-tracking,xr,screen-wake-lock, *;report-to=doc-endpoint
Referrer-Policy: strict-origin-when-cross-origin
Expect-CT: max-age=0, report-uri="https://api.jeurissen.co/reports/ct/web/playsprout.industries"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes