HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Security-Policy-Report-Only: connect-src *;frame-src *;img-src https: data: blob: about: safari-extension: safari-resource: chrome-extension: http://*.rackcdn.com http://*.tumblr.com http://huaban.com;worker-src blob:;script-src https: 'unsafe-eval' 'unsafe-inline'; report-uri /log/csp
Content-Type: text/html; charset=UTF-8
Server: nginx
Strict-Transport-Security: max-age=31536000
X-Content-Security-Policy-Report-Only: connect-src *;frame-src *;img-src https: data: blob: about: safari-extension: safari-resource: chrome-extension: http://*.rackcdn.com http://*.tumblr.com http://huaban.com;worker-src blob:;script-src https: 'unsafe-eval' 'unsafe-inline'; report-uri /log/csp
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Trace-Id: Iw8XjjYobMIiHh8Eu0AMyqd6wq8
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
Via: 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 29 Apr 2018 06:00:02 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-iad2137-IAD, cache-hhn1520-HHN
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1524981602.023951,VS0,VE113
Vary: Accept-Encoding