HTTP/1.1 200 OK
Date: Tue, 23 Mar 2021 17:06:45 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 305576
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding
X-Sdp-App-Type: ripple
section-cache-tags: 42l7 du9i nq0p 6asn 1a9q e5pq 06cn us5v 61ds aovl 80b8 vcor btjp 0m0s bhdp r3n9 b9uq psjj 0o1h pm1v 06vh e73f qusj s9a9 1sv5 hbne qdec 10tq 6hdv kj4f s1af ruu2 d17u b9fc th7o 9oea 9tjr 2dog d6nm emj6 348a jt7s daqo jred ajlj 8bs2 n6j1 sc92 7ksj f09s g1er c63a bg7h pg03 juco 6mad kinu 60gi rm1t q5vj 68r4 nf2l gnv2 va63 8dem a30r cae4 3bhd mov8 l250 qflp aacf rn39 q208 17s6 1f08 j13q cc99 04ka 60jd ruj1 u9k3 j7qd 0hnh 89fg vthf 7v9o
Vary: Accept-Encoding
cache-control: public, max-age=300
section-io-cache-id: 87fbbdf6617c27c4e4f45d9ea882b3c7
Age: 18003
ETag: W/"4a9a8-ZMsl1UOX+iGLMirx7qFLxKWoTcM"
Referrer-Policy: origin, strict-origin, strict-origin-when-cross-origin
Strict-Transport-Security: max-age=1000
X-UA-Compatible: IE=edge
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' www.vic.gov.au blob: *.content.vic.gov.au content.vic.gov.au; script-src 'self' data: blob: www.vic.gov.au *.content.vic.gov.au cdn.storerocket.io cdn.jsdelivr.net *.mapbox.com *.fastly.net storerocket.io content.vic.gov.au cdnjs.cloudflare.com 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com tagmanager.google.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.google-analytics.com cdn.monsido.com connect.facebook.net *.cloudfront.net chatbot.digital.vic.gov.au *.chatbot.digital.vic.gov.au media.twiliocdn.com *.youtube.com ytimg.com *.ytimg.com usercheck.vgso.vic.gov.au public.tableau.com *.openforms.com *.serving-sys.com player.vimeo.com spreadsheets.google.com *.googleadservices.com; style-src 'self' 'unsafe-inline' www.vic.gov.au *.content.vic.gov.au content.vic.gov.au fonts.googleapis.com tagmanager.google.com ui.chatbot.digital.vic.gov.au fast.fonts.net *.openforms.com fontlibrary.org; img-src 'self' data: blob: www.vic.gov.au *.content.vic.gov.au cdn.storerocket.io cdn.jsdelivr.net *.mapbox.com *.fastly.net storerocket.io content.vic.gov.au *.amazee.io tracking.monsido.com *.google-analytics.com *.g.doubleclick.net www.google.com *.google.com *.google.com.au *.hotjar.com *.hotjar.io wss://*.hotjar.com api.mapbox.com *.gstatic.com vic-bot.netlify.app secure.adnxs.com www.facebook.com i.ytimg.com www.google.com.eg www.google.com.co www.google.ie www.google.com.br www.google.co.jp www.google.gr www.google.co.za www.google.co.uk www.google.com.mx www.google.com.na www.google.it www.google.rs www.google.com.sg www.google.co.id www.googletagmanager.com www.google.com.tr www.google.com.pk www.google.nl www.google.lk www.google.hr www.google.fr www.google.com.bo www.google.com.co www.google.com.om www.google.com.ua au-gmtdmp.mookie1.com lh3.googleusercontent.com; font-src 'self' data: www.vic.gov.au *.content.vic.gov.au content.vic.gov.au fonts.gstatic.com *.hotjar.com *.hotjar.io wss://*.hotjar.com fonts.gstatic.com fontlibrary.org; frame-src 'self' www.vic.gov.au *.content.vic.gov.au content.vic.gov.au *.hotjar.com *.hotjar.io wss://*.hotjar.com www.vic.gov.au *.vimeo.com vimeo.com *.youtube.com youtube.com *.youtube-nocookie.com youtube-nocookie.com batchgeo.com www.google.com app.powerbi.com *.vic.gov.au macuport.com dhhs.carto.com public.tableau.com *.libsyn.com *.soundcloud.com *.openforms.com *.serving-sys.com tour.cite360.com.au; connect-src 'self' www.vic.gov.au blob: *.content.vic.gov.au cdn.storerocket.io cdn.jsdelivr.net *.mapbox.com *.fastly.net storerocket.io content.vic.gov.au *.hotjar.com *.hotjar.io wss://*.hotjar.com *.elastic.sdp1.sdp.vic.gov.au *.elastic.sdp.vic.gov.au *.hotjar.io *.google-analytics.com *.g.doubleclick.net api.ipify.org *.myvictoria.vic.gov.au *.api.mapbox.com discover.data.vic.gov.au drwgdblqzrfiz.cloudfront.net chatbot.digital.vic.gov.au *.chatbot.digital.vic.gov.au iam.twilio.com tsock.us1.twilio.com flex-api.twilio.com tsock.us1.twilio.com wss://tsock.us1.twilio.com www.facebook.com www.google.com secure-ds.serving-sys.com api.sdp.vic.gov.au api.go.vic.gov.au; frame-ancestors 'self' *.lagoon.vicsdp.amazee.io *.vic.gov.au; report-uri https://sdpops.report-uri.com/r/d/csp/enforce;
Feature-Policy: ambient-light-sensor 'none';autoplay 'self';accelerometer 'none';battery 'none';camera 'none';display-capture 'none';document-domain 'none';encrypted-media 'none';execution-while-not-rendered 'none';execution-while-out-of-viewport 'none';fullscreen 'self' https://www.youtube.com https://www.youtube-nocookie.com;geolocation 'self';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none';speaker 'self';sync-xhr 'self' *.elastic.sdp1.sdp.vic.gov.au *.elastic.sdp.vic.gov.au cdn.storerocket.io cdn.jsdelivr.net *.mapbox.com *.fastly.net storerocket.io *.hotjar.com *.hotjar.io wss://*.hotjar.com *.google-analytics.com *.g.doubleclick.net api.ipify.org *.myvictoria.vic.gov.au *.api.mapbox.com discover.data.vic.gov.au *.content.vic.gov.au content.vic.gov.au drwgdblqzrfiz.cloudfront.net wss://tsock.us1.twilio.com www.facebook.com www.google.com secure-ds.serving-sys.com api.sdp.vic.gov.au api.go.vic.gov.au;usb 'none';wake-lock 'none';webauthn 'none';vr 'none';xr-spatial-tracking 'none';
section-io-cache: Hit
Accept-Ranges: bytes
section-io-id: 1d6349993342f69968e378afeeeb4028