Nhsgrampian.org

date: Wed, 20 Jul 2022 09:07:37 GMT
content-type: text/html
content-length: 163
location: https://www.nhsgrampian.org/
server: rocket
strict-transport-security: max-age=63072000

HTTP/2 200 
date: Wed, 20 Jul 2022 09:07:38 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: private,max-age=31536000
set-cookie: ASP.NET_SessionId=mvlhbjrssk2ejaibwvf4qk2a; path=/; secure; HttpOnly; SameSite=Lax
x-xss-protection: 1; mode=block;
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https://*.google-analytics.com https://nhsgrampian-dev.scot.nhs.uk https://nsdfapp1.azure-api.net https://*.googleapis.com https://*.civiccomputing.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google-analytics.com https://nhsgrampian-dev.scot.nhs.uk https://*.googletagmanager.com https://*.civiccomputing.com; script-src-elem 'self' https://nhsgrampian-dev.scot.nhs.uk https://*.googleapis.com https://*.google-analytics.com https://*.civiccomputing.com https://*.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; frame-src 'self' https://*.youtube.com/ https://calendar.google.com https://accounts.google.com/; img-src * 'self' data: https:;
server: rocket
strict-transport-security: max-age=63072000
content-security-policy: frame-ancestors 'self' *.scot.nhs.uk *.nhsgrampian.org *.nhslothian.scot hcaptcha.com *.hcaptcha.com; upgrade-insecure-requests; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report-block; report-to csp-endpoint-block
content-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: logger.scot.nhs.uk *.google-analytics.com www.googletagmanager.com *.fontawesome.com use.typekit.net *.google.com *.google.co.uk *.googleapis.com themes.googleusercontent.com *.gstatic.com code.jquery.com yui.yahooapis.com *.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net unpkg.com *.amazonaws.com *.addthis.com *.addthisedge.com *.twitter.com *.twimg.com *.facebook.com *.facebook.net static.xx.fbcdn.net *.youtube.com youtu.be *.ytimg.com www.youtube-nocookie.com player.vimeo.com i.vimeocdn.com cdn.jwplayer.com content.jwplatform.com prd.jwpltx.com *.jwpcdn.com *.jwpsrv.com *.civiccomputing.com cc.cdn.civiccomputing.com secure.gravatar.com public.tableau.com www.openstreetmap.org browser-update.org s.w.org www.geoplugin.net www.careopinion.org.uk static.addtoany.com *.wp.com www.patientopinion.org.uk hcaptcha.com *.hcaptcha.com assets.nhs.uk www.travelinescotland.com www.travelinescotland.com www.nhsgrampian.com www.nhsgrampian.co.uk nhsgrampian.org *.nhsgrampian.org walkit.com nhs.attendanywhere.com; worker-src 'self' www.google.com; frame-ancestors 'self'; base-uri 'self'; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report; report-to csp-endpoint
x-xss-protection: 0
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=(), interest-cohort=()
expect-ct: enforce, max-age=2592000, report-uri="https://web-reports.scot.nhs.uk/api/v1/expect-ct-report"
report-to: {'endpoints': [{'url': 'https://web-reports.scot.nhs.uk/api/v1/csp-report'}], 'group': 'csp-endpoint', 'include_subdomains': false, 'max-age': 2592000}, {'endpoints': [{'url': 'https://web-reports.scot.nhs.uk/api/v1/csp-report-block'}], 'group': 'csp-endpoint-block', 'include_subdomains': false, 'max-age': 2592000}, {'endpoints': [{'url': 'https://showteam.report-uri.com/a/d/g'}], 'group': 'nel-endpoint', 'include_subdomains': false, 'max-age': 30}
nel: {"include_subdomains": false, "max_age": 30, "report_to": "nel-endpoint"}
cache-control: no-transform
content-encoding: br