HTTP/1.1 200 OK
Date: Sun, 31 May 2020 23:54:54 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
Content-Encoding: gzip
ETag: W/"13c3d06c76ac0ce1fedc73bd85d65565"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: sess-v2=a2cc128e526351278db00f71cbba0c9a; path=/; expires=Sun, 07 Jun 2020 23:54:54 -0000; HttpOnly; secure
X-Request-Id: 7985def0-3b90-4459-8714-632f744a4f4f
X-Runtime: 0.097190
Strict-Transport-Security: max-age=31556952; includeSubdomains; preload
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src 'self' blob: accounts.google.com cdn.dochub.com content.googleapis.com docs.google.com js.stripe.com platform.twitter.com syndication.twitter.com www.google.com www.youtube.com; connect-src 'self' blob: *.gravatar.com *.pusher.com *.zopim.com wss://*.zopim.com api.onedrive.com bam.nr-data.net cdn.dochub.com checkout.stripe.com dochub.zendesk.com docs.google.com ekr.zdassets.com graph.microsoft.com macroplant.zendesk.com maps.gstatic.com platform.twitter.com sentry.io stats.g.doubleclick.net www.dropbox.com www.google-analytics.com www.google.com www.googleapis.com wss://ws.pusherapp.com; font-src 'self' data: cdn.dochub.com use.fontawesome.com fonts.googleapis.com fonts.gstatic.com pro.fontawesome.com; form-action 'self'; frame-ancestors mail.google.com chrome-extension://mjgcgnfikekladnkhnimljcalfibijha; frame-src 'self' blob: accounts.google.com cdn.dochub.com checkout.stripe.com content.googleapis.com dochub.com docs.google.com js.stripe.com platform.twitter.com syndication.twitter.com www.google.com www.gstatic.com www.youtube.com; img-src * blob: data:; manifest-src 'self'; media-src 'self' cdn.dochub.com docs.google.com static.zdassets.com; object-src 'self'; script-src 'self' blob: 'unsafe-eval' *.gravatar.com *.pusher.com ajax.googleapis.com apis.google.com bam.nr-data.net cdn.dochub.com checkout.stripe.com content.googleapis.com docs.google.com js-agent.newrelic.com js.live.net js.stripe.com static.zdassets.com www.dropbox.com www.google-analytics.com www.googleapis.com maps.googleapis.com www.googletagmanager.com 'nonce-Xytu7QAtoz9KxW1PVAkSsZriWdq7LBKpB7jNl5PylUU=' 'unsafe-inline'; style-src 'self' 'unsafe-inline' cdn.dochub.com docs.google.com fonts.googleapis.com maps.gstatic.com maxcdn.bootstrapcdn.com platform.twitter.com pro.fontawesome.com; report-uri https://sentry.io/api/1205257/security/?sentry_key=d04bf487c1254343bfe2db4f8f59fe3d