X-XSS-Protection: 1; mode=block; Request-Context: appId=cid-v1:efe91f50-fb49-460d-bb49-abe4d87fa67f Cache-Control: private Content-Type: text/html; charset=utf-8 HTTP/1.1 200 OK X-Content-Type-Options: nosniff Content-Length: 19817 Date: Sun, 11 Feb 2018 14:53:32 GMT Content-Security-Policy: default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://az416426.vo.msecnd.net https://cdnjs.cloudflare.com https://www.google.com https://maps.googleapis.com https://ajax.googleapis.com https://www.gstatic.com https://www.google-analytics.com https://js.braintreegateway.com https://api.braintreegateway.com https://api.sandbox.braintreegateway.com https://client-analytics.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://seal.godaddy.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://cdn.linearicons.com https://cdnjs.cloudflare.com; img-src 'self' data: https://*.gstatic.com https://maps.google.com https://maps.googleapis.com https://www.google-analytics.com https://freetaxhelp.blob.core.windows.net https://seal.godaddy.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.linearicons.com https://cdnjs.cloudflare.com; connect-src 'self' https://dc.services.visualstudio.com; media-src 'self' ; child-src 'self' https://www.google.com https://assets.braintreegateway.com; frame-ancestors 'self' http://freetaxhelp.us http://dizzyatom.azurewebsites.net; form-action 'self' https://accounts.google.com https://www.facebook.com https://twitter.com https://login.live.com https://login.microsoftonline.com https://export.highcharts.com; upgrade-insecure-requests; block-all-mixed-content; sandbox allow-forms allow-same-origin allow-scripts allow-top-navigation allow-popups allow-modals; reflected-xss block; base-uri https://freetaxhelp.us; referrer no-referrer-when-downgrade; Strict-Transport-Security: max-age=31536000