Connection: keep-alive
Content-Type: text/html; charset=utf-8
Server: nginx
Cache-Control: max-age=1800, public
Content-Security-Policy-Report-Only: default-src https: 'self' *.publishing.service.gov.uk www.gov.uk *.dev.gov.uk; img-src 'self' data: *.publishing.service.gov.uk www.gov.uk *.dev.gov.uk www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net www.googletagmanager.com assets.digital.cabinet-office.gov.uk; script-src 'self' *.publishing.service.gov.uk www.gov.uk *.dev.gov.uk www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net www.googletagmanager.com www.gstatic.com www.signin.service.gov.uk *.ytimg.com www.youtube.com www.youtube-nocookie.com hmrc-uk.digital.nuance.com 'unsafe-inline'; style-src 'self' *.publishing.service.gov.uk www.gov.uk *.dev.gov.uk www.gstatic.com 'unsafe-inline'; font-src 'self' *.publishing.service.gov.uk www.gov.uk *.dev.gov.uk data:; connect-src 'self' *.publishing.service.gov.uk www.gov.uk *.dev.gov.uk www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net www.googletagmanager.com www.tax.service.gov.uk hmrc-uk.digital.nuance.com gov.klick2contact.com www.signin.service.gov.uk; object-src 'none'; frame-src 'self' *.publishing.service.gov.uk www.gov.uk *.dev.gov.uk www.youtube.com www.youtube-nocookie.com; report-uri https://jhpno0hk6b.execute-api.eu-west-2.amazonaws.com/production
Etag: W/"2eddcbb576d9f58a18ed99c65d3d1b8b"
Strict-Transport-Security: max-age=31536000; preload
Via: 2.0 router, 1.1 varnish, 1.1 varnish
X-Frame-Options: ALLOWALL
X-Request-Id: 847944fb-ce1a-43f1-906a-dd09aeea39e3
Fastly-Backend-Name: origin
Accept-Ranges: bytes
Date: Fri, 27 Nov 2020 00:46:54 GMT
Age: 1502
X-Served-By: cache-bma1621-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1
X-Timer: S1606438014.418420,VS0,VE1
Vary: Accept-Encoding
x-encoded-content-encoding: gzip
x-encoded-content-length: 11313
|
