HTTP/1.1 200 OK
Date: Thu, 09 Jan 2020 12:22:24 GMT
Server: Apache
X-FRAME-OPTIONS: deny
Set-Cookie: JSESSIONID=FFBA204D80CC92E1718D1EA6CE0B967C; Path=/; Secure; HttpOnly
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-WebKit-CSP: default-src 'self'
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'none';media-src 'self';style-src 'self' https: 'unsafe-inline' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com www.google-analytics.com ;  img-src 'self'  ssl.google-analytics.com www.google-analytics.com; object-src 'none'; report-uri /csp_report_parser;
Strict-Transport-Security: max-age=631138519; includeSubDomains; preload
Referrer-Policy: no-referrer-when-downgrade
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=iso-8859-1