Yahoo.com - Planning.yahoo.com

date: Mon, 27 Feb 2023 00:24:40 GMT
strict-transport-security: max-age=31536000
via: http/1.1 src5.ops.gq1.yahoo.com (ApacheTrafficServer)
server: ATS
cache-control: no-store
content-type: text/html
content-language: en
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox allow-scripts; default-src 'self'; img-src https:; style-src 'unsafe-inline'; script-src 'unsafe-inline'; report-uri http://csp.yahoo.com/beacon/csp?src=redirect
location: https://finance.yahoo.com/retirement
content-length: 4378

HTTP/2 301 
date: Mon, 27 Feb 2023 00:24:40 GMT
strict-transport-security: max-age=31536000
server: ATS
cache-control: no-store
location: https://money.yahoo.com/topic/retirement
content-type: text/html
content-language: en
content-security-policy: frame-ancestors 'self' https://*.builtbygirls.com https://*.rivals.com https://*.engadget.com https://*.intheknow.com https://*.autoblog.com https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.pnr.ouryahoo.com https://pnr.ouryahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.onesearch.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=finance&region=US&lang=en-US&device=&yrid=c2tnad5hvnu28&partner=;
referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
content-length: 322
age: 0
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff

HTTP/2 200 
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-top-navigation-by-user-activation allow-presentation; img-src 'self' data: blob: about: https://*.yimg.com https://*.yahoo.com https://us.y.atwola.com https://gq.us.y.atwola.com https://sb.scorecardresearch.com https://dishdigital.sp1.convertro.com https://servedby.flashtalking.com https://d.agkn.com https://*.doubleclick.net https://*.adsafeprotected.com https://*.googlesyndication.com https://tps30.doubleverify.com https://secure.insightexpressai.com https://secure-gl.imrworldwide.com/cgi-bin/ https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com https://pbs.twimg.com https://trk.vidible.tv/; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://polyfills.yahooapis.com https://*.oath.com https://s.yimg.com https://fc.yahoo.com/sdarla/ https://www.gstatic.com https://*.yahoo.com https://cdn.syndication.twimg.com https://*.yahoo.net; object-src https://money.yahoo.com https://s.yimg.com; style-src 'self' 'unsafe-inline' https://money.yahoo.com https://s.yimg.com https://platform.twitter.com https://*.yahoo.net; media-src 'self' blob: https://*.2mdn.net https://money.yahoo.com https://edgecast-vod.yimg.com https://s.yimg.com; frame-src 'self' https://sp.analytics.yahoo.com https://smartasset.com https://s.yimg.com https://fc.yahoo.com https://money.yahoo.com https://guce.oath.com https://guce.yahoo.com https://delivery.vidible.tv https://cdn-ssl.vidible.tv/ https://platform.twitter.com https://*.advertising.com https://www.surveymonkey.com; worker-src 'self' blob: https://money.yahoo.com; manifest-src 'self' https://s.yimg.com; font-src 'self' data: https://money.yahoo.com https://s.yimg.com https://fonts.gstatic.com; connect-src 'self' https://s.yimg.com https://rtr.innovid.com https://*.yahoo.net https://*.yahoo.com https://*.oath.com https://*.advertising.com https://*.cdn.yimg.com https://ima3vpaid.appspot.com https://ad.doubleclick.net; report-uri https://csp.yahoo.com/beacon/csp?src=yahoomoney; report-to csp-endpoint;
report-to: {"group":"csp-endpoint","max-age":10886400,"endpoints":[{"url":"https://csp.yahoo.com/beacon/csp?src=yahoomoney"}]}
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
date: Mon, 27 Feb 2023 00:24:41 GMT
x-envoy-upstream-service-time: 170
server: ATS
x-envoy-decorator-operation: finance-money--mtls-baseline-production-gq1.finance-k8s.svc.yahoo.local:4080/*
age: 0