Cache-Control: max-age=0, no-cache, must-revalidate, proxy-revalidate Content-Length: 20191 Content-Security-Policy: default-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://maps.google.com https://apis.google.com https://www.google-analytics.com https://*.googleapis.com *.gstatic.com ; child-src 'self' https://accounts.google.com; style-src 'unsafe-inline' 'self' fonts.googleapis.com; font-src 'self' fonts.gstatic.com themes.googleusercontent.com ; img-src * 'self' data:; connect-src 'self' metabase.us10.list-manage.com ; Content-Type: text/html; charset=UTF-8 Date: Thu, 05 Oct 2017 10:30:23 GMT Expires: Tue, 03 Jul 2001 06:00:00 GMT Last-Modified: Thu, 05 Oct 2017 10:30:23 +0000 Server: Jetty(9.2.z-SNAPSHOT) Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block