X-Age: 132 Expires: Sun, 14 May 2017 13:12:50 GMT Content-Security-Policy: default-src 'self'; script-src 'self' https://cdn.jsdelivr.net/bootstrap/3.3.5/ https://www.google.com/jsapi 'unsafe-inline' https://www.google-analytics.com/ https://bbox.blackbaudhosting.com/webforms/ https://translate.google.com/translate_a/ 'unsafe-eval' https://translate.googleapis.com/translate_static/js/ https://translate.googleapis.com/translate_static/js/element/ https://translate.googleapis.com/translate_a/ https://svc.webspellchecker.net/spellcheck31/lf/scayt3/ckscayt/; style-src 'self' https://cdn.jsdelivr.net/bootstrap/3.3.5/ https://translate.googleapis.com/translate_static/css/ 'unsafe-inline' https://bbox.blackbaudhosting.com/webforms/ https://fonts.googleapis.com/ https://svc.webspellchecker.net/spellcheck31/lf/scayt3/ckscayt/; img-src 'self' https://www.google-analytics.com/ https://www.gstatic.com/images/ https://www.google.com/images/ https://translate.googleapis.com/translate_static/ https://bbox.blackbaudhosting.com/webforms/images/ data: https://svc.webspellchecker.net/spellcheck31/lf/scayt3/ckscayt/; frame-src 'self' https://bbox.blackbaudhosting.com/webforms/custom/mongo/scripts/ https://player.vimeo.com/video/ https://www.youtube.com/embed/ https://w.soundcloud.com/player/; font-src 'self' https://cdn.jsdelivr.net/bootstrap/3.3.5/ data: https://fonts.gstatic.com/s/opensans/v13/; connect-src 'self' https://svc.webspellchecker.net/spellcheck31/script/; report-uri /admin/config/system/seckit/csp-report Content-Type: text/html; charset=utf-8 X-Generator: Drupal 7 (http://drupal.org) + govCMS (http://govcms.gov.au) Content-Length: 37478 X-AH-Environment: 01live Strict-Transport-Security: max-age=1000 From-Origin: same X-WebKit-CSP: default-src 'self'; script-src 'self' https://cdn.jsdelivr.net/bootstrap/3.3.5/ https://www.google.com/jsapi 'unsafe-inline' https://www.google-analytics.com/ https://bbox.blackbaudhosting.com/webforms/ https://translate.google.com/translate_a/ 'unsafe-eval' https://translate.googleapis.com/translate_static/js/ https://translate.googleapis.com/translate_static/js/element/ https://translate.googleapis.com/translate_a/ https://svc.webspellchecker.net/spellcheck31/lf/scayt3/ckscayt/; style-src 'self' https://cdn.jsdelivr.net/bootstrap/3.3.5/ https://translate.googleapis.com/translate_static/css/ 'unsafe-inline' https://bbox.blackbaudhosting.com/webforms/ https://fonts.googleapis.com/ https://svc.webspellchecker.net/spellcheck31/lf/scayt3/ckscayt/; img-src 'self' https://www.google-analytics.com/ https://www.gstatic.com/images/ https://www.google.com/images/ https://translate.googleapis.com/translate_static/ https://bbox.blackbaudhosting.com/webforms/images/ data: https://svc.webspellchecker.net/spellcheck31/lf/scayt3/ckscayt/; frame-src 'self' https://bbox.blackbaudhosting.com/webforms/custom/mongo/scripts/ https://player.vimeo.com/video/ https://www.youtube.com/embed/ https://w.soundcloud.com/player/; font-src 'self' https://cdn.jsdelivr.net/bootstrap/3.3.5/ data: https://fonts.gstatic.com/s/opensans/v13/; connect-src 'self' https://svc.webspellchecker.net/spellcheck31/script/; report-uri /admin/config/system/seckit/csp-report Connection: keep-alive X-Content-Security-Policy: default-src 'self'; script-src 'self' https://cdn.jsdelivr.net/bootstrap/3.3.5/ https://www.google.com/jsapi 'unsafe-inline' https://www.google-analytics.com/ https://bbox.blackbaudhosting.com/webforms/ https://translate.google.com/translate_a/ 'unsafe-eval' https://translate.googleapis.com/translate_static/js/ https://translate.googleapis.com/translate_static/js/element/ https://translate.googleapis.com/translate_a/ https://svc.webspellchecker.net/spellcheck31/lf/scayt3/ckscayt/; style-src 'self' https://cdn.jsdelivr.net/bootstrap/3.3.5/ https://translate.googleapis.com/translate_static/css/ 'unsafe-inline' https://bbox.blackbaudhosting.com/webforms/ https://fonts.googleapis.com/ https://svc.webspellchecker.net/spellcheck31/lf/scayt3/ckscayt/; img-src 'self' https://www.google-analytics.com/ https://www.gstatic.com/images/ https://www.google.com/images/ https://translate.googleapis.com/translate_static/ https://bbox.blackbaudhosting.com/webforms/images/ data: https://svc.webspellchecker.net/spellcheck31/lf/scayt3/ckscayt/; frame-src 'self' https://bbox.blackbaudhosting.com/webforms/custom/mongo/scripts/ https://player.vimeo.com/video/ https://www.youtube.com/embed/ https://w.soundcloud.com/player/; font-src 'self' https://cdn.jsdelivr.net/bootstrap/3.3.5/ data: https://fonts.gstatic.com/s/opensans/v13/; connect-src 'self' https://svc.webspellchecker.net/spellcheck31/script/; report-uri /admin/config/system/seckit/csp-report X-Content-Type-Options: nosniff X-Frame-Options: SameOrigin X-Cache-Hits: 3 HTTP/1.1 200 OK Server: nginx Date: Sun, 14 May 2017 13:12:43 GMT X-Varnish: 855547169 855545966 Cache-Control: public, max-age=7 X-Drupal-Cache: MISS X-Request-ID: v-180708a2-38a6-11e7-8c92-22000a169b74 P3P: CP="CURa ADMa OUR UNI INT STA PRE COM NAV NOI COR ONL" ETag: "1494767167-1" Link: <https://www.nfsa.gov.au/>; rel="canonical",<https://www.nfsa.gov.au/>; rel="shortlink" Content-Language: en Last-Modified: Sun, 14 May 2017 13:06:07 GMT