Via: 1.1 varnish content-security-policy: default-src 'self' blob: https://*.cnn.com:* http://*.cnn.com:* *.cnn.io:* *.cnn.net:* *.turner.com:* *.turner.io:* *.ugdturner.com:* courageousstudio.com *.vgtf.net:*; script-src 'unsafe-eval' 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' blob: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; img-src 'self' data: blob: *; media-src 'self' blob: *; font-src 'self' data: *; connect-src 'self' *; frame-ancestors 'self' *.cnn.com *.turner.com courageousstudio.com; Set-Cookie: countryCode=DE; Domain=.cnn.com; Path=/ X-Cache: HIT, HIT x-xss-protection: 1; mode=block HTTP/1.1 200 OK Accept-Ranges: bytes X-Timer: S1497870809.365265,VS0,VE0 Age: 151 Vary: Accept-Encoding, Fastly-SSL, Fastly-SSL Connection: keep-alive Set-Cookie: geoData=cologne|NW|51149|DE|EU; Domain=.cnn.com; Path=/ x-content-type-options: nosniff access-control-allow-origin: * X-Served-By: cache-iad2134-IAD, cache-hhn1543-HHN Fastly-Debug-Digest: 546dbb9cc4676d8bc870fc45d3706d22b1ea3048315d73eccae83b0d1c7dac23 X-Cache-Hits: 1, 2 x-servedByHost: ::ffff:172.17.31.9 Content-Type: text/html; charset=utf-8 cache-control: max-age=60 Via: 1.1 varnish Date: Mon, 19 Jun 2017 11:13:29 GMT Content-Length: 157127