X-Drupal-Cache: MISS
From-Origin: same
X-Generator: Drupal 7 (http://drupal.org)
X-Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' *.surrey.ac.uk:* hello.myfonts.net *.cloudfront.net *.surrey.ac.uk www.googletagmanager.com *.sharethis.com *.raxcdn.com *.amazonaws.com www.google-analytics.com js.bizographics.com www.youtube.com stats.g.doubleclick.net s.ytimg.com *.linkedin.com storify.com www.google.com *.bizographics.com pbs.twimg.com www.google.co.uk www.qzzr.com surrey.funnelback.co.uk *.seatadvisor.com connect.facebook.net *.licdn.com ws.sessioncam.com *.googleapis.com widget.unistats.ac.uk *.gstatic.com *.facebook.com *.twitter.com *.twimg.com *.click4assistance.co.uk *.instagram.com www.googleadservices.com *.doubleclick.net *.blackbaudhosting.com; report-uri /admin/config/system/seckit/csp-report
ETag: W/"1494390662-1"
X-Cache-Hits: 766
Via: 1.1 varnish-v4
X-Varnish: 620234 1553108
X-UA-Compatible: IE=Edge
X-Content-Type-Options: nosniff
X-AH-Environment: prod
Content-Language: en
Vary: Cookie,Accept-Encoding
HTTP/1.1 200 OK
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Connection: keep-alive
Date: Wed, 10 May 2017 04:46:40 GMT
Link: <https://www.surrey.ac.uk/>; rel="canonical",<https://www.surrey.ac.uk/>; rel="shortlink"
X-Request-ID: v-793ef276-3539-11e7-8202-22000a4d1994
Content-Type: text/html; charset=utf-8
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' *.surrey.ac.uk:* hello.myfonts.net *.cloudfront.net *.surrey.ac.uk www.googletagmanager.com *.sharethis.com *.raxcdn.com *.amazonaws.com www.google-analytics.com js.bizographics.com www.youtube.com stats.g.doubleclick.net s.ytimg.com *.linkedin.com storify.com www.google.com *.bizographics.com pbs.twimg.com www.google.co.uk www.qzzr.com surrey.funnelback.co.uk *.seatadvisor.com connect.facebook.net *.licdn.com ws.sessioncam.com *.googleapis.com widget.unistats.ac.uk *.gstatic.com *.facebook.com *.twitter.com *.twimg.com *.click4assistance.co.uk *.instagram.com www.googleadservices.com *.doubleclick.net *.blackbaudhosting.com; report-uri /admin/config/system/seckit/csp-report
Age: 938
X-XSS-Protection: 1; mode=block
X-Cache: HIT
X-Frame-Options: SameOrigin
Accept-Ranges: bytes
X-Server-Name: web-20197.prod.hosting.acquia.com
Content-Length: 52309
Cache-Control: public, max-age=21600
Last-Modified: Wed, 10 May 2017 04:31:02 GMT
X-WebKit-CSP: default-src 'self' 'unsafe-eval' 'unsafe-inline' *.surrey.ac.uk:* hello.myfonts.net *.cloudfront.net *.surrey.ac.uk www.googletagmanager.com *.sharethis.com *.raxcdn.com *.amazonaws.com www.google-analytics.com js.bizographics.com www.youtube.com stats.g.doubleclick.net s.ytimg.com *.linkedin.com storify.com www.google.com *.bizographics.com pbs.twimg.com www.google.co.uk www.qzzr.com surrey.funnelback.co.uk *.seatadvisor.com connect.facebook.net *.licdn.com ws.sessioncam.com *.googleapis.com widget.unistats.ac.uk *.gstatic.com *.facebook.com *.twitter.com *.twimg.com *.click4assistance.co.uk *.instagram.com www.googleadservices.com *.doubleclick.net *.blackbaudhosting.com; report-uri /admin/config/system/seckit/csp-report