Strict-Transport-Security: max-age=2592000; includeSubdomains Content-Security-Policy: script-src 'self' https://www.google-analytics.com/analytics.js https://www.google.com/jsapi https://www.google.com/uds/ https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/ https://www.googletagmanager.com/gtm.js https://www.googleadservices.com/pagead/ ; default-src 'self' ; img-src 'self' data: https: ; connect-src 'self' https://services.google.com/fb/submissions/4e1cd530dc4311e6817acb4ea21f50e6/ ; child-src 'self' https://www.google.com https://www.youtube.com https://accounts.google.com https://apis.google.com ; base-uri 'self' ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.gstatic.com https://www.google.com https://ajax.googleapis.com ; report-uri https://csp.withgoogle.com/csp/gweb-giac/1; frame-src 'self' https://*.fls.doubleclick.net https://accounts.google.com https://apis.google.com https://www.google.com https://www.youtube.com https://www.googletagmanager.com ; object-src 'none' ; font-src 'self' https://themes.googleusercontent.com https://*.gstatic.com https://fonts.googleapis.com X-Frame-Options: DENY X-Cloud-Trace-Context: 1461a6fef1b0c02d82f7982c7bd22208;o=1 X-XSS-Protection: 1; mode=block HTTP/1.1 200 OK Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35" X-Content-Type-Options: nosniff Date: Sat, 21 Oct 2017 23:10:02 GMT Content-Length: 8516 Server: Google Frontend Cache-Control: max-age=600, public Content-Type: text/html; charset=utf-8