Cache-Control: public, max-age=600 Content-Security-Policy: script-src 'self' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.google-analytics.com *.googleanalytics.com *.googletagmanager.com *.youtube.com *.ytimg.com *.doubleclick.net; default-src 'self'; img-src 'self' data: *.googleapis.com *.google-analytics.com *.google.com *.gstatic.com; media-src 'self' storage.googleapis.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com *.gstatic.com; frame-src 'self' *.youtube.com docs.google.com *.doubleclick.net; connect-src 'self' *.google.com *.googleapis.com charts-dot-gweb-dcl-dev.appspot.com; font-src 'self' *.gstatic.com Content-Type: text/html Date: Fri, 06 Oct 2017 01:17:48 GMT Etag: "6Ovsaw" Expires: Fri, 06 Oct 2017 01:27:48 GMT Server: Google Frontend Status: 200 Strict-Transport-Security: max-age=300; includeSubdomains Vary: Accept-Encoding X-Cloud-Trace-Context: 2cc99005938e9b3db9c044efe9299b03 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Xss-Protection: 1; mode=block