X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self' ; connect-src 'self' https://www.google-analytics.com https://selfserve-api-dot-softserve-prod.appspot.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://accounts.snapchat.com https://accounts.snap-dev.net https://adsapi.snapchat.com https://admanager-api-dot-teamko619.appspot.com https://snap-central-dot-teamko619.appspot.com https://snap-central-dev-dot-teamko619.appspot.com https://adsapisc.appspot.com https://storage.googleapis.com https://selfserve-api-dot-teamko619.appspot.com https://rich-snap-platform.appspot.com https://rich-snap-platform-dev.appspot.com https://preproduction-dot-softserve-prod.appspot.com wss://*.zopim.com https://*.zopim.com https://snap-web-chat.appspot.com https://googleads.g.doubleclick.net https://storage.googleapis.com https://www.paypal.com https://*.tiles.mapbox.com https://api.mapbox.com ; script-src 'self' 'sha256-hCTNlFqzidWwi97XgqmHWxgFyfu4i8DJW6yudBCRam8=' https://www.googleadservices.com https://www.google-analytics.com https://www.paypal.com https://apis.google.com ; worker-src 'self' blob: ; child-src 'self' blob: ; style-src 'self' 'unsafe-inline' blob: https://snap-central-dot-teamko619.appspot.com ; font-src 'self' data: https://snap-central-dot-teamko619.appspot.com https://storage.googleapis.com ; media-src 'self' data: blob: https://storage.googleapis.com https://rich-snap-platform.appspot.com https://rich-snap-platform-dev.appspot.com ; frame-src 'self' blob: https://ads.springboard.la https://accounts.google.com https://accounts.snapchat.com https://creativesuite-prod.appspot.com https://assets.braintreegateway.com https://www.paypal.com https://snappublisher.snapchat.com https://players.brightcove.net ; report-uri /_api/reports/csp-violations ; img-src 'self' data: blob: https://api.mapbox.com https://www.googleadservices.com https://www.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://storage.googleapis.com https://www.google-analytics.com https://storage.googleapis.com https://v2uploads.zopim.io https://rich-snap-platform.appspot.com https://rich-snap-platform-dev.appspot.com https://admanager-api-dot-teamko619.appspot.com https://adsapi.snapchat.com https://render.bitstrips.com https://www.paypal.com https://lens-storage.storage.googleapis.com https://snapcodes.storage.googleapis.com https://snapchatpd-a.akamaihd.net ; Cache-Control: public, max-age=300 Content-Type: text/html Pragma: Public HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000 Server: Google Frontend Date: Mon, 12 Feb 2018 23:24:51 GMT X-Frame-Options: SAMEORIGIN X-Cloud-Trace-Context: 2a13799e72f6968797efc0ca321a5cf0 Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35" Content-Length: 3365