Content-Length: | 0 |
Access-Control-Allow-Headers: | accept, x-vt-authorization, authorization, origin, content-type |
X-Content-Type-Options: | nosniff |
Content-Security-Policy: | upgrade-insecure-requests; default-src 'self';script-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com www.google-analytics.com *.typekit.net *.litix.io ajax.googleapis.com www.google.com www.gstatic.com;style-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com fonts.googleapis.com;child-src 'self' https://voicethread.com submit.jotformpro.com https://*.facebook.com player.vimeo.com www.google.com;connect-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com performance.typekit.net;font-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com use.typekit.net fonts.gstatic.com fonts.googleapis.com;form-action 'self' https://voicethread.com submit.jotformpro.com;frame-ancestors * ;img-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com docs.google.com *.googleusercontent.com www.google-analytics.com https://*.facebook.com p.typekit.net stats.g.doubleclick.net *.litix.io;media-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com;object-src 'self' https://prod-cdn.voicethread.com; |
Set-Cookie: | VTSESSID=ppq6lh9dpc4m22pe86njevlneu; expires=Fri, 02-Aug-2019 17:19:12 GMT; Max-Age=31556926; path=/; domain=voicethread.com; secure; HttpOnly |
Strict-Transport-Security: | max-age=7890000; includeSubDomains |
Expires: | Mon, 26 Jul 1997 05:00:00 GMT |
Vary: | User-Agent |
Refresh: | 0;url=https://voicethread.com/ |
Server: | Apache |
Content-Security-Policy-Report-Only: | default-src https:; script-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com www.google-analytics.com *.typekit.net *.litix.io ajax.googleapis.com www.google.com www.gstatic.com;style-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com fonts.googleapis.com;child-src 'self' https://voicethread.com submit.jotformpro.com https://*.facebook.com player.vimeo.com www.google.com;connect-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com performance.typekit.net;font-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com use.typekit.net fonts.gstatic.com fonts.googleapis.com;form-action 'self' https://voicethread.com submit.jotformpro.com;frame-ancestors * ;img-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com docs.google.com *.googleusercontent.com www.google-analytics.com https://*.facebook.com p.typekit.net stats.g.doubleclick.net *.litix.io;media-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com;object-src 'self' https://prod-cdn.voicethread.com;report-uri /csp_report/; |
Last-Modified: | Thu, 02 Aug 2018 11:30:26 GMT |
Connection: | keep-alive |
X-XSS-Protection: | 0 |
Pragma: | no-cache |
Cache-Control: | no-cache, no-store, must-revalidate |
Date: | Thu, 02 Aug 2018 11:30:26 GMT |
Access-Control-Allow-Origin: | * |
Access-Control-Allow-Methods: | HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS |
Content-Type: | text/html; charset=UTF-8 |
P3P: | CP="CAO DSP COR CUR ADMi DEVi TAIi PSAi IVAi IVDi CONi OUR BUS CNT" |