Strict-Transport-Security: max-age=63072000; includeSubDomains; preload HTTP/1.1 200 OK Connection: keep-alive X-UA-Compatible: IE=edge Pinterest-Version: 13224e3 Content-Type: text/html; charset=utf-8 Set-Cookie: _pinterest_sess=TWc9PSZIU1I3Y1l5VE9MVnNVNnY0SGlrRFhrQVlRLzAzNjJXcmMvSEYvZlVwT2hKMCsvRitYbHdtMXpNaWxna2dQbndvTjB3MHUxQlRDcEtvWmYvV2ZSMEZmNzNLejJ3anRQTzFrb3plWUJ2ZXRYbnNHdC91RFFGNkIvVURSMDFkRmdOczJ3VjF2ZU1MUUl2N1JHZHI2cG5VWEE9PSZxU1E1VXZmcCtnSmpYbjVmR2YyZUJvSDdVdDg9; expires=Tue, 21-Aug-2018 14:43:54 GMT; httponly; Max-Age=31103999; Path=/; secure Content-Security-Policy: media-src 'self' *.pinimg.com blob:; object-src 'self' h.online-metrix.net; connect-src 'self' *.pinimg.com *.pinterest.com *.branch.io pinterest-media-upload.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net ; script-src 'nonce-mpYPdwgjLK' 'strict-dynamic' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.googleapis.com *.gstatic.com *.accountkit.com *.facebook.com www.googleadservices.com googleads.g.doubleclick.net platform.twitter.com *.online-metrix.net *.bnc.lt bnc.lt *.branch.io *.yozio.com cdn.ampproject.org radar.cedexis.com *.cedexis-test.com 'unsafe-inline' 'unsafe-eval'; base-uri 'none'; report-uri /_/_/csp_report/ Vary: User-Agent, Cookie, Accept-Encoding X-Upstream-Env: python P3P: CP="This is not a P3P policy. See https://www.pinterest.com/_/_/help/articles/pinterest-and-p3p for more info." Pinterest-Generated-By: coreapp-webapp-prod-0a010990 Transfer-Encoding: chunked Date: Sat, 26 Aug 2017 14:43:54 GMT X-Pinterest-RID: 207629702656 Set-Cookie: _auth=0; expires=Tue, 21-Aug-2018 14:43:54 GMT; httponly; Max-Age=31103999; Path=/; secure X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Age: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: csrftoken=C2K04IpXc7vByLbXuI91l2fPoFjEGyzM; expires=Sat, 25-Aug-2018 14:43:54 GMT; Max-Age=31449600; Path=/; secure