| server: |
nginx |
| date: |
Wed, 02 Oct 2024 17:07:57 GMT |
| content-type: |
text/html; charset=utf-8 |
| transfer-encoding: |
chunked |
| connection: |
close |
| report-to: |
{"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://report-to-api.raygun.com/reports?apikey=eFHZerPFdZ3aTZx9bMGuw"}]} |
| content-security-policy: |
base-uri 'none'; connect-src 'self' *.swiftype.com https://assets.westpac.co.nz https://westpacnewzealand.tt.omtrdc.net http://westpacnewzealand.tt.omtrdc.net https://smetrics.comms.westpac.co.nz https://westpacnewzealand.sc.omtrdc.net https://dpm.demdex.net https://connect.facebook.net https://www.facebook.com https://www.instagram.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://analytics.google.com https://www.google.co.nz/ads/ga-audiences https://google.com https://*.google.com https://www.google.com.au https://www.googleadservices.com https://translate.googleapis.com https://adservice.google.com https://www.google.com https://*.doubleclick.net https://www.google-analytics.com https://maps.googleapis.com https://*.qualtrics.com https://analytics.tiktok.com https://*.dynatrace.com https://*.bf.dynatrace.com https://*.linkedin.oribi.io https://*.linkedin.com *.google.com https://*.gstatic.com https://googleads.g.doubleclick.net https://*.googlesyndication.com; default-src 'self'; form-action 'self' https://*.westpac.co.nz https://*.microsoftonline.com/ https://www.facebook.com/tr/; img-src 'self' *.ytimg.com https://staticcdn.co.nz https://api.rkd.refinitiv.com https://smetrics.comms.westpac.co.nz https://westpacnewzealand.sc.omtrdc.net https://cm.everesttech.net https://dpm.demdex.net https://connect.facebook.net https://www.facebook.com https://*.google-analytics.com https://*.googletagmanager.com https: https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://maps.gstatic.com https://*.googleapis.com https://*.ggpht.com data: https://analytics.tiktok.com blob:; media-src 'self' data:; object-src 'none'; font-src 'self' https://fonts.gstatic.com data:; upgrade-insecure-requests; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://tagmanager.google.com https://fonts.googleapis.com; script-src www.youtube.com s.ytimg.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ player.vimeo.com api.swiftype.com https://staticcdn.co.nz https://assets.adobedtm.com https://js.adsrvr.org https://insight.adsrvr.org https://*.adsrvr.org https://*.westpac.co.nz https://code.jquery.com https://connect.facebook.net https://www.facebook.com https://*.google-analytics.com https://www.googletagmanager.com 'unsafe-eval' https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://*.qualtrics.com https://analytics.tiktok.com https://js-cdn.dynatrace.com https://*.dynatrace.com https://*.licdn.com 'unsafe-inline' https://maps.googleapis.com; frame-src *.youtube.com www.google.com/recaptcha/ recaptcha.google.com/recaptcha/ player.vimeo.com https://staticcdn.co.nz https://insight.adsrvr.org https://*.adsrvr.org https://wnzl.demdex.net https://*.westpac.co.nz https://www.facebook.com https://*.doubleclick.net https://stats.g.doubleclick.net https://www.googletagmanager.com https://bid.g.doubleclick.net bytedance: sslocal: https://*.zscalerthree.net https://gateway.zscalerthree.net 'self'; child-src player.vimeo.com 'self'; script-src-elem https://staticcdn.co.nz https://assets.adobedtm.com https://js.adsrvr.org https://insight.adsrvr.org https://*.adsrvr.org https://*.westpac.co.nz https://smetrics.comms.westpac.co.nz http://smetrics.comms.westpac.co.nz https://code.jquery.com https://connect.facebook.net https://www.facebook.com https://*.google-analytics.com https://*.googletagmanager.com https://www.googleadservices.com https://*.qualtrics.com https://analytics.tiktok.com https://*.dynatrace.com https://*.licdn.com *.google.com https://*.gstatic.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.zscalerthree.net https://gateway.zscalerthree.net 'self' 'unsafe-inline' https://maps.googleapis.com; worker-src 'self' player.vimeo.com blob:; report-uri https://report-to-api.raygun.com/reports-csp?apikey=eFHZerPFdZ3aTZx9bMGuw; report-to csp-endpoint |
| csp-name: |
ContentSecurityPolicy |
| cache-control: |
public, must-revalidate, max-age=60 |
| expires: |
Wed, 02 Oct 2024 17:08:57 GMT |
| etag: |
"a6b424c06b16ec9a5600271797c48de8" |
| vary: |
Accept-Encoding |
| x-xss-protection: |
1; mode=block |
| x-content-type-options: |
nosniff |
| x-frame-options: |
SAMEORIGIN |
| strict-transport-security: |
max-age=31536000 |
| referrer-policy: |
strict-origin-when-cross-origin |
| permissions-policy: |
camera=(), microphone=(), browsing-topics=() |
| set-cookie: |
nlbi_2478727=lJnXK1J71hQo1VwkOO028gAAAABiklyO7SUNJDn+tkNvsyXp; HttpOnly; path=/; Domain=.westpac.co.nz,visid_incap_2478727=YHdbThxvTUWeyNvJyeFouut9/WYAAAAAQUIPAAAAAABywuaM/AHWvQeRGmWL5Li2; expires=Thu, 02 Oct 2025 15:38:24 GMT; HttpOnly; path=/; Domain=.westpac.co.nz,incap_ses_775_2478727=aNs2anuPHCtvQVPDh1rBCu19/WYAAAAAWa6usySX2tH05B4fTpKkYw==; path=/; Domain=.westpac.co.nz |
| x-cdn: |
Imperva |
| x-iinfo: |
12-13255427-13250373 2NNN RT(1727888876362 112) q(0 0 0 1) r(9 9) |
