HTTP/1.1 200 OK
Date: Fri, 15 Jan 2021 06:54:24 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 182192
Connection: keep-alive
Cache-Control: no-cache, no-store
Pragma: no-cache
Expires: -1
Set-Cookie: ASP.NET_SessionId=yniamab3kml53evq0fjyuu25; path=/; secure; HttpOnly; SameSite=Lax
X-Frame-Options: SAMEORIGIN
Set-Cookie: ASP.NET_SessionId=yniamab3kml53evq0fjyuu25; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: __RequestVerificationToken=xu_fh3N2oT1oSrCKdN8AQqWScE4DGYwR68Duy4blai9G8jn1eB4Oondu2AdKcSGQQxqu4-GQku_HkvBQJiKBlcd0URzUL9KpMAfFrAdC6IY1; path=/; secure; HttpOnly
Set-Cookie: sxa_site=VAH18; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src https: 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' data: *; media-src blob: 'self' *; font-src 'self' data: *; connect-src 'self' *; child-src blob: 'self' *; block-all-mixed-content;
X-Content-Security-Policy: default-src https: 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' data: *; media-src blob: 'self' *; font-src 'self' data: *; connect-src 'self' *; child-src blob: 'self' *; block-all-mixed-content;