HTTP/1.1 200 200
Date: Tue, 08 Dec 2020 02:55:41 GMT
Server: Apache
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
Pragma: No-cache
Cache-Control: no-cache,no-store,max-age=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 9973
Vary: Accept-Encoding
X-Robots-Tag: noindex, nofollow
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=2AC96CA6C4EB4546AD0F431C98B66D8A; Path=/assetbank-belmond; Secure; HttpOnly;SameSite=None
Content-Security-Policy: default-src 'self' data: *.amazonaws.com *.cloudfront.net *.gstatic.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.zdassets.com *.zendesk.com *.google.com *.gstatic.com *.googleapis.com unpkg.com *.assetbank.co.uk *.brandstencil.com *.googletagmanager.com *.google-analytics.com *.cookielaw.org *.onetrust.com; style-src blob: 'self' 'unsafe-inline' *.brandstencil.com *.googleapis.com; object-src 'self' *.amazonaws.com *.cloudfront.net; img-src 'self' *.amazonaws.com *.cloudfront.net *.gstatic.com *.googleapis.com *.google.com *.assetbank.co.uk analytics.bright-interactive.com *.google-analytics.com stats.g.doubleclick.net *.brandstencil.com *.cookielaw.org data: blob:; worker-src 'self' blob:; connect-src 'self' *.zdassets.com *.zendesk.com *.google-analytics.com *.cookielaw.org *.doubleclick.net *.onetrust.com blob:; frame-src 'self' *.herokuapp.com *.bright-interactive.com *.assetbank.app *.google.com *.brandstencil.com *.officeapps.live.com *.youtube.com;