HTTP/1.1 200 OK
Connection: keep-alive
Cache-Control: max-age=0, private, must-revalidate
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Set-Cookie: xfp_country_alpha2=us; domain=.chowhound.com; path=/; expires=Sat, 20 Jun 2020 16:10:50 -0000
Set-Cookie: _chow_session_04_production=123526d7c703290f5cce62f085788c17; domain=.chowhound.com; path=/; expires=Fri, 19 Jun 2020 18:10:50 -0000; HttpOnly
Status: 200 OK
Content-Security-Policy: default-src *.chowhound.com *.cbsinteractive.com cbsinteractive.com blob: *.chowhound.com https: 'unsafe-inline' 'unsafe-eval'; script-src blob: *.chowhound.com https: data: 'unsafe-inline' 'unsafe-eval'; media-src http://ipad.cbs.com.edgesuite.net http://ipad-streaming.cbs.com http://can.cbs.com http://canhls.cbs.com cbs-hls.akamaized.net blob: *.chowhound.com data: video https:; font-src *.chowstatic.com *.cbsistatic.com vidtech.cbsinteractive.com rev.cbsi.com fonts.gstatic.com maxcdn.bootstrapcdn.com 'self' data: ; connect-src http://canhls.cbs.com http://ipad.cbs.com.edgesuite.net http://ipad-streaming.cbs.com http://can.cbs.com cbs-hls.akamaized.net https:; img-src https: data: http://thumbnails.cbsig.net; frame-src https:; frame-ancestors *.chowhound.com *.google.com *.ampproject.org; form-action https: http://*.chow.com http://*.chowhound.com; report-uri https://cbsi.report-uri.io/r/default/csp/enforce
X-Frame-Options: SAMEORIGIN
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Jun 2020 16:10:50 GMT
Vary: Accept-Encoding, User-Agent, Host, Origin
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
transfer-encoding: chunked