HTTP/1.1 200 OKServer: nginxDate: Tue, 18 Apr 2017 06:46:48 GMTContent-Type: text/html; charset=UTF-8Connection: keep-aliveSet-Cookie: country=US; path=/Link: ; rel="https://api.w.org/"Strict-Transport-Security: max-age=300X-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob:; font-src https: data:; img-src https: data:; media-src blob: https:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests; report-uri https://ars.report-uri.io/r/default/csp/enforceX-Ars-Server: web09Content-Encoding: gzip