X-Drupal-Cache: HIT
X-Content-Security-Policy: default-src 'self' *.google-analytics.com:* *.morgansindall.com:*; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.twitter.com:* *.twimg.com:* *.civiccomputing.com:* *.google-analytics.com:* *.google.com:* *.gstatic.com:* *.morgansindall.com:*; object-src 'self' *.twitter.com:* *.twimg.com:* *.morgansindall.com:*; style-src 'self' 'unsafe-inline' *.twitter.com:* *.twimg.com:* *.morgansindall.com:*; img-src 'self' *.twitter.com:* *.twimg.com:* *.google-analytics.com:* data: *.civiccomputing.com *.morgansindall.com:*; media-src 'self' *.morgansindall.com:*; frame-src 'self' *.twitter.com:* *.twimg.com:* *.google.com:* *.youtube.com:* *.quartalflife.com *.morgansindall.com:* *.investis.com:* *.brightcove.net:* *.rackcdn.com:*; font-src 'self' *.morgansindall.com:*; connect-src 'self' *.morgansindall.com:*; report-uri /admin/config/system/seckit/csp-report
X-Content-Type-Options: nosniff
Content-Language: en
Last-Modified: Mon, 19 Jun 2017 05:42:34 GMT
X-Frame-Options: SAMEORIGIN
HTTP/1.1 200 OK
Etag: "1497850954-0"
From-Origin: same, http://corporate.morgansindall.com, https://corporate.morgansindall.com
Content-Type: text/html; charset=utf-8
X-UA-Compatible: IE=edge
Date: Mon, 19 Jun 2017 08:00:35 GMT
Server: Sucuri/Cloudproxy
Vary: Cookie,Accept-Encoding
X-Frame-Options: SameOrigin
Cache-Control: public, max-age=900
X-XSS-Protection: 1; mode=block
Link: <https://www.morgansindall.com/>; rel="canonical",<https://www.morgansindall.com/>; rel="shortlink"
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' *.google-analytics.com:* *.morgansindall.com:*; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.twitter.com:* *.twimg.com:* *.civiccomputing.com:* *.google-analytics.com:* *.google.com:* *.gstatic.com:* *.morgansindall.com:*; object-src 'self' *.twitter.com:* *.twimg.com:* *.morgansindall.com:*; style-src 'self' 'unsafe-inline' *.twitter.com:* *.twimg.com:* *.morgansindall.com:*; img-src 'self' *.twitter.com:* *.twimg.com:* *.google-analytics.com:* data: *.civiccomputing.com *.morgansindall.com:*; media-src 'self' *.morgansindall.com:*; frame-src 'self' *.twitter.com:* *.twimg.com:* *.google.com:* *.youtube.com:* *.quartalflife.com *.morgansindall.com:* *.investis.com:* *.brightcove.net:* *.rackcdn.com:*; font-src 'self' *.morgansindall.com:*; connect-src 'self' *.morgansindall.com:*; report-uri /admin/config/system/seckit/csp-report
X-Content-Type-Options: nosniff
Connection: keep-alive
X-Sucuri-ID: 15003
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Strict-Transport-Security: max-age=1000
X-Sucuri-Cache: REVALIDATED
Transfer-Encoding: chunked
X-WebKit-CSP: default-src 'self' *.google-analytics.com:* *.morgansindall.com:*; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.twitter.com:* *.twimg.com:* *.civiccomputing.com:* *.google-analytics.com:* *.google.com:* *.gstatic.com:* *.morgansindall.com:*; object-src 'self' *.twitter.com:* *.twimg.com:* *.morgansindall.com:*; style-src 'self' 'unsafe-inline' *.twitter.com:* *.twimg.com:* *.morgansindall.com:*; img-src 'self' *.twitter.com:* *.twimg.com:* *.google-analytics.com:* data: *.civiccomputing.com *.morgansindall.com:*; media-src 'self' *.morgansindall.com:*; frame-src 'self' *.twitter.com:* *.twimg.com:* *.google.com:* *.youtube.com:* *.quartalflife.com *.morgansindall.com:* *.investis.com:* *.brightcove.net:* *.rackcdn.com:*; font-src 'self' *.morgansindall.com:*; connect-src 'self' *.morgansindall.com:*; report-uri /admin/config/system/seckit/csp-report