HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.3.18-1+ubuntu18.04.1+deb.sury.org+1
Cache-Control: must-revalidate, no-cache, private
Date: Fri, 29 May 2020 13:50:19 GMT
X-Drupal-Dynamic-Cache: MISS
Link: <https://bolser.co.uk/>; rel="shortlink", <https://bolser.co.uk/>; rel="canonical"
Link: <https://bolser.co.uk/node/1>; rel="revision"
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Vary:
X-Generator: Drupal 8 (https://www.drupal.org)
X-Drupal-Cache: HIT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com tagmanager.google.com api.getaddress.io 'unsafe-inline'; style-src 'self' fonts.googleapis.com fonts.gstatic.com tagmanager.google.com 'unsafe-inline'; font-src 'self' fonts.googleapis.com fonts fonts.gstatic.com data:; media-src 'self' s3-eu-west-1.amazonaws.com data:; img-src 'self' *.google-analytics.com *.gstatic.com *.googleapis.com s3-eu-west-1.amazonaws.com data:; frame-src *; connect-src *
Referrer-Policy: strict-origin-when-cross-origin
Feature-Policy: geolocation 'self'; camera 'none';
Content-Encoding: gzip