HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Content-Security-Policy: script-src 'self' https://*.nfb.ca https://*.onf.ca https://cdnjs.cloudflare.com https://player.vimeo.com https://maps.googleapis.com https://graph.facebook.com 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com tagmanager.google.com connect.facebook.net *.google-analytics.com sb.scorecardresearch.com widget.surveymonkey.com apis.google.com cdnapisec.kaltura.com cdnapi.kaltura.com widget.surveymonkey.com www.gstatic.com js.adsrvr.org survey.g.doubleclick.net https://www.google.com https://adservice.google.ca https://survey.g.doubleclick.net; style-src 'self' https://*.nfb.ca https://*.onf.ca https://cdnjs.cloudflare.com 'unsafe-inline' hello.myfonts.net fonts.googleapis.com tagmanager.google.com https://www.google.com; frame-ancestors 'self' https://*.nfb.ca https://*.onf.ca; manifest-src 'self' https://*.nfb.ca https://*.onf.ca; default-src 'none'; frame-src 'self' https://*.google.com https://www.gstatic.com https://www.facebook.com https://insight.adsrvr.org https://esqa.moneris.com https://www3.moneris.com https://player.vimeo.com https://www.youtube.com https://connect.facebook.net https://*.nfb.ca https://*.onf.ca https://player.twitch.tv; worker-src 'self' *.onf.ca *.nfb.ca https://*.kaltura.com blob:; img-src 'self' sb.scorecardresearch.com b.scorecardresearch.com *.google-analytics.com cfvod.kaltura.com www.facebook.com http://*.onf.ca http://*.nfb.ca https://*.onf.ca https://*.nfb.ca https://*.kaltura.com stats.g.doubleclick.net *.gstatic.com data: https://interactive-cms.s3.amazonaws.com https://interactive-cms-dev.s3.amazonaws.com http://*.gravatar.com https://*.gravatar.com https://dkyhanv6paotz.cloudfront.net; media-src 'self' https://*.onf.ca https://*.nfb.ca https://*.kaltura.com https://dkyhanv6paotz.cloudfront.net blob:; object-src 'self' https://*.nfb.ca https://*.onf.ca https://*.kaltura.com; connect-src 'self' https://*.nfb.ca https://*.onf.ca https://*.kaltura.com https://www.facebook.com https://s3.amazonaws.com *.google-analytics.com; font-src 'self' https://*.onf.ca https://*.nfb.ca fonts.gstatic.com cdnapi.kaltura.com cdnapisec.kaltura.com data:
Content-Type: text/html; charset=utf-8
Date: Wed, 17 Jul 2019 01:00:04 GMT
ETag: "440097c8e772decd6bdbb0afcfac03b9"
Server: nginx
Set-Cookie: csrftoken=0QQiZmNI7pRDckubYZECOcAGdb6HTYhh; expires=Wed, 15-Jul-2020 01:00:04 GMT; Max-Age=31449600; Path=/; secure
Vary: Cookie,Accept-Encoding
Content-Length: 101587
Connection: keep-alive