X-UA-Compatible: IE=edge, Chrome=1 Content-Type: text/html; charset=utf-8 Content-Security-Policy: default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://getpocket.com https://uxdesign.blog.br https://*.uxdesign.blog.br https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://app.zencoder.com 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com X-Obvious-Tid: 1497031574525:d561377643ca X-Content-Type-Options: nosniff Expires: Thu, 09 Sep 1999 09:09:09 GMT Set-Cookie: uid=lo_7288df59c51f; path=/; expires=Sat, 09 Jun 2018 18:06:14 GMT; secure; httponly HTTP/1.1 200 OK Pragma: no-cache Connection: keep-alive Tk: T Server: openresty X-Frame-Options: sameorigin Date: Fri, 09 Jun 2017 18:06:15 GMT X-Powered-By: Medium Cache-Control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 137289 Link: <https://medium.com/humans.txt>; rel="humans" X-XSS-Protection: 1; mode=block X-Obvious-Info: 29363-dc5368a,dc5368a Set-Cookie: sid=1:Jt7qEPEZtaKm6qSsdCuCpvTu1vypHGLP5rhLRGNtcKflfgcxOS0OGu8BZQnK7E3b; path=/; expires=Sat, 09 Jun 2018 18:06:14 GMT; secure; httponly