HTTP/1.1 200 OK
Date: Sat, 20 Jun 2020 20:54:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: AWSALB=0Zi1c18/Rg3asS4BHPVMozhNxPautHbaMA3QdmjJ/w6WnmWUjw8N5bsA1Xvgt90B6ObhVABB1ab8ZLBpTLmHuCojxDMT7ZdL8Iy1J0BbWbg6oQRhsTc5P9yAYHtA; Expires=Sat, 27 Jun 2020 20:54:42 GMT; Path=/
Set-Cookie: AWSALBCORS=0Zi1c18/Rg3asS4BHPVMozhNxPautHbaMA3QdmjJ/w6WnmWUjw8N5bsA1Xvgt90B6ObhVABB1ab8ZLBpTLmHuCojxDMT7ZdL8Iy1J0BbWbg6oQRhsTc5P9yAYHtA; Expires=Sat, 27 Jun 2020 20:54:42 GMT; Path=/; SameSite=None; Secure
Server: Apache
Content-Security-Policy: upgrade-insecure-requests;  default-src 'self';  img-src 'self' blob: data: cdn.wfp.org acr.api.spring.wfp.org api.mapbox.com geonode.wfp.org *.jwplatform.com cdn.jwplayer.com *.jwpsrv.com *.jwpltx.com www.google.com www.google-analytics.com *.gstatic.com *.doubleclick.net www.facebook.com ssl.google-analytics.com squizlabs.github.io;  script-src 'self' cdn.wfp.org *.jwplatform.com www.google.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com survey.g.doubleclick.net *.doubleclick.net *.adalyser.com *.jwpcdn.com www.gstatic.com adservice.google.com connect.facebook.net www.facebook.com squizlabs.github.io cdnjs.cloudflare.com unpkg.com 'unsafe-inline' 'unsafe-eval';  frame-src 'self' *.jwpsrv.com www.google.com survey.g.doubleclick.net *.doubleclick.net cdn.knightlab.com forms.office.com content.jwplatform.com;  font-src 'self' cdn.wfp.org *.jwpcdn.com fonts.gstatic.com *.bootstrapcdn.com data:;  style-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.wfp.org tagmanager.google.com fonts.googleapis.com *.bootstrapcdn.com squizlabs.github.io;  connect-src 'self' data: cdn.wfp.org geonode.wfp.org www.google-analytics.com api.mapbox.com geoip.nekudo.com api.ipify.org api.ip2country.info mycountry.picktek.org content.jwplatform.com *.jwpsrv.com cdn.jwplayer.com acr.api.spring.wfp.org;  media-src 'self' content.jwplatform.com *.jwpsrv.com cdn.jwplayer.com blob:;  worker-src 'self' blob:;  child-src 'self' blob:
X-XSS-Protection: 1;mode=block
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=2592000
Cache-Control: must-revalidate, no-cache, private
X-Drupal-Dynamic-Cache: MISS
Link: <https://www.wfp.org/>; rel="canonical", <https://www.wfp.org/>; rel="shortlink"
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Vary: Accept-Encoding
X-Drupal-Cache: HIT