HTTP/1.1 200 OK
Date: Sun, 24 Apr 2022 23:19:52 GMT
Server: Apache/2.4.46 (Ubuntu)
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: frame-src 'self' *.google.com *.facebook.com *.facebook.net *.wufoo.eu *.wufoo.com *.paypal.com *.doubleclick.net *.cloudfront.net *.googleadservices.com *.clarity.ms *.hsleadflows.net *.hsadpixel.net *.hs-analytics.net *.hs-banner.com *.hsforms.com *.usemessages.com *.bing.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.cookiepro.com *.hotjar.com *.viewit360.co.uk *.amazonaws.com *.hubspot.com *.youtube.com *.youtu.be *.amazon-adsystem.com;
Referrer-Policy: strict-origin
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding,User-Agent
Access-Control-Allow-Origin: https://helpdesk.studentroost.co.uk
Permissions-Policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
Set-Cookie: PHPSESSID=0bgq9cm9pq121bqal1h0csmjih; path=/;HttpOnly;Secure
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8