| Content-Length: | 0 |
| Access-Control-Allow-Headers: | accept, x-vt-authorization, authorization, origin, content-type |
| X-Content-Type-Options: | nosniff |
| Content-Security-Policy: | upgrade-insecure-requests; default-src 'self';script-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com www.google-analytics.com *.typekit.net *.litix.io ajax.googleapis.com www.google.com www.gstatic.com;style-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com fonts.googleapis.com;child-src 'self' https://voicethread.com submit.jotformpro.com https://*.facebook.com player.vimeo.com www.google.com;connect-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com performance.typekit.net;font-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com use.typekit.net fonts.gstatic.com fonts.googleapis.com;form-action 'self' https://voicethread.com submit.jotformpro.com;frame-ancestors * ;img-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com docs.google.com *.googleusercontent.com www.google-analytics.com https://*.facebook.com p.typekit.net stats.g.doubleclick.net *.litix.io;media-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com;object-src 'self' https://prod-cdn.voicethread.com; |
| Set-Cookie: | VTSESSID=ppq6lh9dpc4m22pe86njevlneu; expires=Fri, 02-Aug-2019 17:19:12 GMT; Max-Age=31556926; path=/; domain=voicethread.com; secure; HttpOnly |
| Strict-Transport-Security: | max-age=7890000; includeSubDomains |
| Expires: | Mon, 26 Jul 1997 05:00:00 GMT |
| Vary: | User-Agent |
| Refresh: | 0;url=https://voicethread.com/ |
| Server: | Apache |
| Content-Security-Policy-Report-Only: | default-src https:; script-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com www.google-analytics.com *.typekit.net *.litix.io ajax.googleapis.com www.google.com www.gstatic.com;style-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com fonts.googleapis.com;child-src 'self' https://voicethread.com submit.jotformpro.com https://*.facebook.com player.vimeo.com www.google.com;connect-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com performance.typekit.net;font-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com use.typekit.net fonts.gstatic.com fonts.googleapis.com;form-action 'self' https://voicethread.com submit.jotformpro.com;frame-ancestors * ;img-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com docs.google.com *.googleusercontent.com www.google-analytics.com https://*.facebook.com p.typekit.net stats.g.doubleclick.net *.litix.io;media-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com;object-src 'self' https://prod-cdn.voicethread.com;report-uri /csp_report/; |
| Last-Modified: | Thu, 02 Aug 2018 11:30:26 GMT |
| Connection: | keep-alive |
| X-XSS-Protection: | 0 |
| Pragma: | no-cache |
| Cache-Control: | no-cache, no-store, must-revalidate |
| Date: | Thu, 02 Aug 2018 11:30:26 GMT |
| Access-Control-Allow-Origin: | * |
| Access-Control-Allow-Methods: | HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS |
| Content-Type: | text/html; charset=UTF-8 |
| P3P: | CP="CAO DSP COR CUR ADMi DEVi TAIi PSAi IVAi IVDi CONi OUR BUS CNT" |