Headers of https://expenseplus.co.uk/charity/

HTTP/1.1 302 Found
Date
Fri, 06 May 2022 09:45:55 GMT
Server
Apache
Strict-Transport-Security
max-age=31536000
Referrer-Policy
no-referrer
Permissions-Policy
camera=(self)
Set-Cookie
__Secure-PHPSESSID=01B8oB644V%2CVvI5WnwtHHwfIjnMuevqoaPDB-uWgy-AR5vHJLM8X2wPuqI2TPkLY; path=/; secure; HttpOnly; SameSite=Lax
Expires
Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control
no-store, no-cache, must-revalidate
Pragma
no-cache
Location
https://expenseplus.co.uk/charity/gateway/signin
X-Content-Type-Options
nosniff
X-Frame-Options
SAMEORIGIN
X-XSS-Protection
1
Content-Length
0
Connection
close
Content-Type
text/html; charset=UTF-8
HTTP/1.1 200 OK
Date
Fri, 06 May 2022 09:45:56 GMT
Server
Apache
Strict-Transport-Security
max-age=31536000
Referrer-Policy
no-referrer
Permissions-Policy
camera=(self)
Set-Cookie
__Secure-PHPSESSID=2m8gNggxQzBR0dFeAddGn0801sPYRWcB8fNoSxYftr-2wVxzThH3I4HmaKYhdgZ8; path=/; secure; HttpOnly; SameSite=Lax
Expires
Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control
no-store, no-cache, must-revalidate
Pragma
no-cache
Content-Security-Policy
script-src 'self' 'unsafe-inline' code.jquery.com js.stripe.com
Content-Security-Policy-Report-Only
default-src 'self'; script-src 'self' 'unsafe-inline' code.jquery.com js.stripe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' js.stripe.com; frame-ancestors https://expenseplus.co.uk; report-uri /csp-report
Vary
Accept-Encoding
X-Content-Type-Options
nosniff
X-Frame-Options
SAMEORIGIN
X-XSS-Protection
1
Content-Length
5297
Connection
close
Content-Type
text/html; charset=UTF-8