HTTP/1.0 200 OK
Date: Fri, 17 May 2019 16:53:43 GMT
Server: Apache
X-Frame-Options: sameorigin
Strict-Transport-Security: max-age=31536000; includeSubDomains
Set-Cookie: 81f30cf708470b974874c8a96a6bcdb2=47cc8e96eb8939b0b8027defb23fbe4f; path=/; secure; HttpOnly
Set-Cookie: 81f30cf708470b974874c8a96a6bcdb2=ceb88d099b5e014149e51d979d2bdfcb; path=/; secure; HttpOnly
Set-Cookie: d482552ea4a74f85af0bb3d73890dabc=+5+E+45E43105E+E+2444543+7406F5D+11B+37E+B4A+3+05F41134B514059+4+951135F765817+3+B5C1243+B5612+F16+3+B+2+A1B5A5D+75B5E5C+4+B+E+75151+155+C5250+05D53+1545B+5+950575B5C56535B1B+3165952+2164044+C+016+A17+25056+31A+555525A+A54+45C+05A+555+9+8+C54575F5D+1+3535C53+D55565A+7+25A5A44+B4358+6+A16164A515412+24A+256515C1A5757555D5C50+15D+1+1515C+857+4+156+B55+1545D+1+7+95D+B5A+1+5+55A16+94A; expires=Mon, 14-May-2029 16:53:43 GMT; Max-Age=315360000; path=/; secure; httponly
Cache-Control: private, must-revalidate
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Referrer-Policy: same-origin
pragma: no-cache
expires: -1
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Report-To: { 'group': 'cms',  'max-age': 10886400, 'endpoints': [{ 'url': 'https://help.hubzero.org/csp-cms.php' }] },{ 'group': 'mailman',  'max-age': 10886400, 'endpoints': [{ 'url': 'https://help.hubzero.org/csp-mailman.php' }] }, { 'group': 'trac',  'max-age': 10886400, 'endpoints': [{ 'url': 'https://help.hubzero.org/csp-trac.php' }] }, { 'group': 'cms-admin',  'max-age': 10886400, 'endpoints': [{ 'url': 'https://help.hubzero.org/csp-cms-admin.php' }] }, { 'group': 'cms-nophp',  'max-age': 10886400, 'endpoints': [{ 'url': 'https://help.hubzero.org/csp-cms-nophp.php' }] }
Content-Security-Policy-Report-Only: base-uri 'self'; object-src 'self' ; child-src 'self' https://*.youtube.com; connect-src 'self' wss://*.vhub.org https://www.google-analytics.com https://stats.g.doubleclick.net https://www.purdue.edu wss://vhub.org https://www.dropbox.com https://graph.facebook.com ; default-src 'self' https://*.vhub.org https://*.vhub.aws.hubzero.org; font-src 'self' https://fonts.gstatic.com data: safari-extension: chrome-extension: ; form-action 'self' https://platform.twitter.com https://syndication.twitter.com; frame-src 'self' https://*.vhub.org https://*.vhub.aws.hubzero.org  https://*.google.com https://*.youtube.com https://content.googleapis.com https://*.facebook.com https://*.twitter.com ; img-src * data: image:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.google-analytics.com https://*.google.com https://connect.facebook.net https://www.linkedin.com https://platform.twitter.com  https://cdn.syndication.twimg.com https://www.gstatic.com https://*.googleapis.com https://platform.linkedin.com data: blob: ; style-src 'self' 'unsafe-inline' https://platform.twitter.com https://ton.twimg.com https://*.googleapis.com https://www.google.com ; report-uri https://help.hubzero.org/csp-cms.php; report-to cms
Connection: close
Content-Type: text/html; charset=utf-8