Age: 2 Cache-Control: no-store, no-cache, private, max-age=0 Content-Security-Policy-Report-Only: default-src * 'self' https://*.yimg.com https://*.yahoo.com data: blob:; font-src data: https://*.yimg.com https://*.yahoo.com 'self'; media-src blob: 'self' https://*.yahoo.com https://*.yimg.com; connect-src 'self' https://*.yimg.com https://*.yahoo.com wss://*.yahoo.com https://yahoo.hs.llnwd.net; style-src https://*.yimg.com https://*.yahoo.com 'self' 'unsafe-inline'; script-src https://*.yahoo.com https://*.yimg.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src https://*.yahoo.com https://sb.scorecardresearch.com data: 'self' https://*.yimg.com; object-src 'self' https://*.yimg.com https://*.yahoo.com; frame-ancestors https://*.techcrunch.com https://*.huffingtonpost.com https://*.aol.com https://*.yahoo.com; report-uri https://csp.yahoo.com/beacon/csp?src=frontpage&site=frontpage®ion=US&lang=en-US&device=desktop&bkt=1005229=fpdmcntrl&1006783=CSP200&1009207=FPNOT02&1009399=SR201&partner=; Content-Type: text/html; charset=utf-8 Date: Wed, 04 Oct 2017 17:06:11 GMT Expires: -1 Server: ATS Status: 200 Strict-Transport-Security: max-age=2592000 Via: http/1.1 media-router-fp20.prod.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 ir14.fp.ir2.yahoo.com (ApacheTrafficServer) X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block