HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 Jul 2019 14:45:07 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOW-FROM https://*.webvisor.com
Content-Security-Policy: default-src 'self' http://* https://* blob: data:; script-src 'self' 'unsafe-inline' http://* https://* blob: 'unsafe-eval' data:; connect-src * 'self' http://* https://* blob: data:; img-src data: 'self' http://* https://* blob:; style-src 'self' 'unsafe-inline' http://* https://* blob: data:; font-src 'self' data: http://* https://* blob:;
Vary: Accept-Encoding
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: frame-ancestors 'none'
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer, strict-origin-when-cross-origin