| date: |
Tue, 01 Oct 2024 13:18:52 GMT |
| content-type: |
text/html; charset=utf-8 |
| content-length: |
35024 |
| connection: |
close |
| server: |
nginx |
| x-dns-prefetch-control: |
off |
| x-frame-options: |
SAMEORIGIN, SAMEORIGIN |
| strict-transport-security: |
max-age=15552000 |
| x-download-options: |
noopen |
| x-content-type-options: |
nosniff |
| x-xss-protection: |
1; mode=block |
| set-cookie: |
token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJmYXZvcmRlbGl2ZXJ5LmNvbSIsImlhdCI6MTcyNzc4ODczMiwiZXhwIjoxNzI3OTYxNTMyLCJncm91cF9pZCI6IjQiLCJncm91cF9uYW1lIjoiYW5vbnltb3VzX2N1c3RvbWVycyIsInBlcm1pc3Npb25zIjp7ImNvcmVfYXBpIjpbIio6Z2V0IiwiKjpicm93c2UiXX0sImFub255bW91cyI6dHJ1ZX0.DW56QUifhj6-PfKTgKHZi-7FG3X-RqSsCdkX19HeWCQ; Path=/; Expires=Fri, 01 Nov 2024 13:18:52 GMT; HttpOnly; Secure,fvr:session=s%3A7920VotnvfaQQ9QNrLZ5bYup4MvsnEjF.w88YMALLaXvz2W8xqcpqzzrpbnD3cmoFITtypYh0Qos; Path=/; HttpOnly; Secure |
| etag: |
W/"88d0-aiJchFiXfB2rUYK8eBcDlUskxqY" |
| vary: |
Accept-Encoding |
| referrer-policy: |
strict-origin |
| expect-ct: |
enforce, max-age=30, report-uri=https://favor.report-uri.com/r/t/ct/enforce |
| content-security-policy-report-only: |
child-src js.stripe.com *.rfihub.com www.facebook.com; connect-src 'self' sdk.iad-01.braze.com wss://ws-mt1.pusher.com sockjs-mt1.pusher.com api.segment.io api2.branch.io cdn.segment.com firebaseinstallations.googleapis.com firebaseremoteconfig.googleapis.com firebaselogging-pa.googleapis.com maps.googleapis.com https://dataplane.rum.us-east-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://sts.us-east-1.amazonaws.com https://*.launchdarkly.com https://*.forter.com https://d3in1te4fdays6.cloudfront.net https://d1wix2gc2cgqis.cloudfront.net https://analytics.google.com wss://cdn0.forter.com *.favorengineering.com *.prod.favor.dev *.pci-np.favor.dev *.favordelivery.com ct.pinterest.com stats.g.doubleclick.net www.google-analytics.com www.facebook.com api.askfavor.com privacyportal.onetrust.com geolocation.onetrust.com cdn.cookielaw.org; frame-src *.rfihub.com js.stripe.com bid.g.doubleclick.net www.facebook.com *.criteo.com *.criteo.net; img-src 'self' pixel.pointmediatracker.com flask.nextdoor.com cdn.blisspointmedia.com d3nocrch4qti4v.cloudfront.net df45ay5pw60dy.cloudfront.net duuytoqss3gu4.cloudfront.net amplifypixel.outbrain.com *.favorengineering.com *.prod.favor.dev *.pci-np.favor.dev *.favordelivery.com cdn.askfavor.com ct.pinterest.com hexagon-analytics.com pinterest.adsymptotic.com stats.g.doubleclick.net tr.outbrain.com www.facebook.com www.google-analytics.com www.google.com googleads.g.doubleclick.net maps.googleapis.com maps.gstatic.com www.googletagmanager.com api.askfavor.com platform-lookaside.fbsbx.com *.criteo.net pingclock.net graph.facebook.com cdn.cookielaw.org data:; script-src-elem 'self' 'unsafe-inline' cdn.segment.com ads.nextdoor.com https://client.rum.us-east-1.amazonaws.com *.pci.favor.dev *.favorengineering.com https://*.forter.com https://dkupaw9ae63a8.cloudfront.net ont.net wss://cdn0.forter.com *.prod.favor.dev *.pci-np.favor.dev *.rfihub.com *.rfihub.net amplify.outbrain.com cdn.siftscience.com www.google.com web.btncdn.com connect.facebook.net googleads.g.doubleclick.net js.stripe.com maps.googleapis.com s.pinimg.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com *.criteo.com *.criteo.net app.link cdn.branch.io cdn.cookielaw.org; script-src 'self' 'unsafe-eval' cdn.segment.com ads.nextdoor.com cdn.branch.io https://client.rum.us-east-1.amazonaws.com https://*.forter.com https://dkupaw9ae63a8.cloudfront.net *.favorengineering.com *.pci.favor.dev *.prod.favor.dev *.pci-np.favor.dev cdn.siftscience.com js.stripe.com maps.googleapis.com www.google.com web.btncdn.com 'unsafe-inline' *.rfihub.com amplify.outbrain.com connect.facebook.net googleads.g.doubleclick.net s.pinimg.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com *.criteo.com *.criteo.net *.rfihub.net app.link; style-src-attr 'unsafe-inline' fonts.googleapis.com; style-src-elem 'unsafe-inline' cloud.typography.com web-assets.favordelivery.com 'self' fonts.googleapis.com; style-src 'unsafe-eval' 'unsafe-inline' cloud.typography.com 'self' web-assets.favordelivery.com fonts.googleapis.com; form-action www.facebook.com favordelivery.com; default-src 'self' 'unsafe-eval' 'unsafe-inline' *.rfihub.com amplify.outbrain.com amplifypixel.outbrain.com *.favordelivery.com *.favorengineering.com *.prod.favor.dev *.pci-np.favor.dev bid.g.doubleclick.net cdn.askfavor.com cdn.siftscience.com cloud.typography.com connect.facebook.net ct.pinterest.com googleads.g.doubleclick.net hexagon-analytics.com js.stripe.com maps.googleapis.com s.pinimg.com tr.outbrain.com www.facebook.com www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com fonts.gstatic.com; font-src 'self' data: fonts.gstatic.com; manifest-src 'self'; script-src-attr 'unsafe-inline'; report-uri https://favor.report-uri.com/r/t/csp/reportOnly; worker-src blob: |
| report-to: |
{"group":"default","max_age":31536000,"endpoints":[{"url":"https://favor.report-uri.com/a/d/g"}],"include_subdomains":true} |
| nel: |
{"report_to":"default","max_age":31536000,"include_subdomains":true} |
