HTTP/1.1 200 OK
Date: Thu, 05 Sep 2019 10:56:55 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 115168
Connection: keep-alive
Set-Cookie: AWSALB=BDR2HgYV3v1TVZlNEdnW4RRihI4EC4fYVPlhUapuA+gjTsbLiv5nlRU+fXJOZflDJRyZcq48xwlpB4dknjeFXUYAfVVmOtB4Qejhr1/4/JrGDUVOK9RXfgK7erdh; Expires=Thu, 12 Sep 2019 10:56:55 GMT; Path=/
Cache-Control: max-age=600, public
Content-Language: en
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Thu, 05 Sep 2019 08:01:14 GMT
ETag: "1567670474"
Vary: Cookie
Server: Microsoft-IIS/10.0
Link: <https://www.southshorehealth.org/>; rel="shortlink", <https://www.southshorehealth.org/>; rel="canonical"
Link: </home-page>; rel="revision"
X-UA-Compatible: IE=edge
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.authorize.net *.google.com static.addtoany.com cdnjs.cloudflare.com cdn.rawgit.com maps.googleapis.com rw1.marchex.io connect.facebook.net googleads.g.doubleclick.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com cdn.jsdelivr.net; object-src 'self'; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com tagmanager.google.com; img-src 'self' 'unsafe-inline' data: maps.googleapis.com px.marchex.io s3.amazonaws.com sshs-web.s3.amazonaws.com *.facebook.com *.google.com *.gstatic.com cdn.rawgit.com raw.githubusercontent.com stats.g.doubleclick.net *.google-analytics.com; frame-src 'self' 'unsafe-inline' static.addtoany.com *.doubleclick.net *.google.com add auntbertha.com *.auntbertha.com players.brightcove.net *.youtube.com; font-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com sshs-web.s3.amazonaws.com; connect-src 'self' 'unsafe-inline' *.authorize.net *.facebook.com stats.addtoany.com *.google-analytics.com; report-uri //report-csp-violation
X-Content-Security-Policy: default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.authorize.net *.google.com static.addtoany.com cdnjs.cloudflare.com cdn.rawgit.com maps.googleapis.com rw1.marchex.io connect.facebook.net googleads.g.doubleclick.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com cdn.jsdelivr.net; object-src 'self'; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com tagmanager.google.com; img-src 'self' 'unsafe-inline' data: maps.googleapis.com px.marchex.io s3.amazonaws.com sshs-web.s3.amazonaws.com *.facebook.com *.google.com *.gstatic.com cdn.rawgit.com raw.githubusercontent.com stats.g.doubleclick.net *.google-analytics.com; frame-src 'self' 'unsafe-inline' static.addtoany.com *.doubleclick.net *.google.com add auntbertha.com *.auntbertha.com players.brightcove.net *.youtube.com; font-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com sshs-web.s3.amazonaws.com; connect-src 'self' 'unsafe-inline' *.authorize.net *.facebook.com stats.addtoany.com *.google-analytics.com; report-uri //report-csp-violation
X-WebKit-CSP: default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.authorize.net *.google.com static.addtoany.com cdnjs.cloudflare.com cdn.rawgit.com maps.googleapis.com rw1.marchex.io connect.facebook.net googleads.g.doubleclick.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com cdn.jsdelivr.net; object-src 'self'; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com tagmanager.google.com; img-src 'self' 'unsafe-inline' data: maps.googleapis.com px.marchex.io s3.amazonaws.com sshs-web.s3.amazonaws.com *.facebook.com *.google.com *.gstatic.com cdn.rawgit.com raw.githubusercontent.com stats.g.doubleclick.net *.google-analytics.com; frame-src 'self' 'unsafe-inline' static.addtoany.com *.doubleclick.net *.google.com add auntbertha.com *.auntbertha.com players.brightcove.net *.youtube.com; font-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com sshs-web.s3.amazonaws.com; connect-src 'self' 'unsafe-inline' *.authorize.net *.facebook.com stats.addtoany.com *.google-analytics.com; report-uri //report-csp-violation
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Drupal-Cache: HIT