HTTP/1.1 200 OK
Date: Wed, 05 Jun 2019 09:49:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 439081
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding
Vary: Cookie, Accept-Language
Cache-Control: max-age=1800, must-revalidate
Link: </static/images/fpcom.svg?4.13.2>; rel=preload; as=image
Content-Language: en-gb
X-Frame-Options: SAMEORIGIN
ETag: "c50ddcadbfdc98fa7207e805904d3a9a"
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy-Report-Only: font-src 'self' https://media.forbiddenplanet.com data: fonts.googleapis.com storage.googleapis.com fonts.gstatic.com themes.googleusercontent.com; style-src *.twimg.com *.pinterest.com *.google.com *.bootstrapcdn.com *.twitter.com unpkg.com *.gstatic.com www.googletagmanager.com *.facebook.com https://media.forbiddenplanet.com www.google-analytics.com fonts.googleapis.com themes.googleusercontent.com *.googleapis.com *.youtube.com 'self' fonts.gstatic.com *.youtu.be *.instagram.com 'unsafe-eval' www.googlecommerce.com 'unsafe-inline' *.cloudfront.net *.surveymonkey.com *.akamaihd.net *.facebook.net data: *.sagepay.com storage.googleapis.com; frame-ancestors 'self'; default-src 'self' https://media.forbiddenplanet.com 'unsafe-inline' 'unsafe-eval' data:; script-src 'self' https://media.forbiddenplanet.com 'unsafe-inline' 'unsafe-eval' data: www.googletagmanager.com www.googlecommerce.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.instagram.com *.pinterest.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.sagepay.com *.surveymonkey.com *.bootstrapcdn.com *.cloudfront.net *.akamaihd.net; worker-src 'self' https://media.forbiddenplanet.com www.googletagmanager.com www.googlecommerce.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.instagram.com *.pinterest.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.sagepay.com *.surveymonkey.com *.bootstrapcdn.com *.cloudfront.net *.akamaihd.net data:; frame-src 'self' https://media.forbiddenplanet.com www.googletagmanager.com www.googlecommerce.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.instagram.com *.pinterest.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.sagepay.com *.surveymonkey.com *.bootstrapcdn.com *.cloudfront.net *.akamaihd.net data:; connect-src *.twimg.com *.pinterest.com *.google.com *.bootstrapcdn.com *.twitter.com unpkg.com *.gstatic.com https: www.googletagmanager.com *.facebook.com https://media.forbiddenplanet.com dyn.media.forbiddenplanet.com wss://forbiddenplanet.com www.google-analytics.com *.youtube.com *.googleapis.com fonts.googleapis.com themes.googleusercontent.com 'self' *.tile.openstreetmap.com fonts.gstatic.com *.youtu.be *.instagram.com dyn0.media.forbiddenplanet.com www.googlecommerce.com *.cloudfront.net *.surveymonkey.com *.akamaihd.net *.facebook.net tripadvisor.com www.gravatar.com data: *.sagepay.com storage.googleapis.com openstreetmap.com; img-src 'self' https://media.forbiddenplanet.com https: data: www.gravatar.com tripadvisor.com unpkg.com openstreetmap.com *.tile.openstreetmap.com dyn0.media.forbiddenplanet.com dyn.media.forbiddenplanet.com www.googletagmanager.com www.googlecommerce.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.instagram.com *.pinterest.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.sagepay.com *.surveymonkey.com *.bootstrapcdn.com *.cloudfront.net *.akamaihd.net; report-uri /@csp-report
Set-Cookie: fpcrtupd=2019-06-05T09:49:50.111956+00:00; expires=Wed, 05 Jun 2019 10:49:50 GMT; HttpOnly; Max-Age=3600; Path=/; Secure
Set-Cookie: csrftoken=ua12wejuKjEVwSUmyFj9CqCC0Akrn35VcFpsoBhaJUa1V8znP5oHGXd5r2BiHN2n; expires=Wed, 03 Jun 2020 09:49:50 GMT; Max-Age=31449600; Path=/; SameSite=Lax; Secure
Set-Cookie: sessionid=860sw17ohra904w1r589w2dww7zsylm1; expires=Wed, 19 Jun 2019 09:49:50 GMT; HttpOnly; Max-Age=1209600; Path=/; Secure
X-UA-Compatible: IE=edge
Referrer-Policy: strict-origin-when-cross-origin
Server: The Great Machine
X-Cache-Status: MISS