Finance.yahoo

date: Wed, 09 Aug 2023 15:42:53 GMT
strict-transport-security: max-age=31536000
via: http/1.1 src3.ops.gq1.yahoo.com (ApacheTrafficServer)
server: ATS
cache-control: no-store
content-type: text/html
content-language: en
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox allow-scripts; default-src 'self'; img-src https:; style-src 'unsafe-inline'; script-src 'unsafe-inline'; report-uri http://csp.yahoo.com/beacon/csp?src=redirect
location: https://finance.yahoo.com/
content-length: 4373

HTTP/2 200 
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' https://*.yahoo.com https://*.engadget.com https://*.pnr.ouryahoo.com https://pnr.ouryahoo.com https://*.search.aol.com https://*.onesearch.com https://*.publishing.oath.com https://*.aol.com; sandbox allow-downloads allow-forms allow-modals allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-top-navigation-by-user-activation allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=yahoofinance; report-to csp-endpoint;
report-to: {"group":"csp-endpoint","max-age":10886400,"endpoints":[{"url":"https://csp.yahoo.com/beacon/csp?src=yahoofinance"}]}
cache-control: private, no-store, no-cache, max-age=0
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 09 Aug 2023 15:42:54 GMT
x-envoy-upstream-service-time: 935
server: ATS
x-envoy-decorator-operation: finance-nodejs--mtls-production-gq1.finance-k8s.svc.yahoo.local:4080/*
age: 2
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff