X-XSS-Protection: 1; mode=block Server: nginx P3P: CP="This is not a P3P policy! The P3P standard is deprecated. Read more about P3P here: https://en.wikipedia.org/wiki/P3P" Date: Mon, 05 Mar 2018 14:00:35 GMT Connection: keep-alive X-Best-Pony: Twilight Sparkle X-UA-Compatible: IE=Edge Vary: Accept-Encoding Alt-Svc: h2=":443"; ma=2628000; persist=1 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=31536000; preload HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' *.mlp.one mlp.one; child-src 'self' *.mlp.one mlp.one smartlock.google.com; connect-src 'self' *.mlp.one mlp.one; font-src 'self' *.mlp.one mlp.one fonts.gstatic.com; img-src 'self' *.mlp.one mlp.one blob: data: www.google-analytics.com www.gstatic.com; media-src 'self' *.mlp.one mlp.one blob:; script-src 'self' *.mlp.one mlp.one blob: data: accounts.google.com smartlock.google.com www.google-analytics.com 'unsafe-inline'; style-src 'self' *.mlp.one mlp.one fonts.googleapis.com 'unsafe-inline'; upgrade-insecure-requests X-Page-Speed: 1.13.35.1-0 Transfer-Encoding: chunked Cache-Control: max-age=0, no-cache Alternate-Protocol: 443:h2 Link: <https://podcast.mlp.one>; rel=preconnect; pr=1 X-Content-Type-Options: nosniff Content-Type: text/html; charset=utf-8