Oxleas.nhs.uk - Qmh.oxleas.nhs.uk

Date: Mon, 21 Jul 2025 07:42:01 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://oxleas.nhs.uk/
X-UA-Compatible: IE=edge

HTTP/1.1 200 
Date: Mon, 21 Jul 2025 07:42:02 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 13738
Connection: keep-alive
Access-Control-Allow-Origin: https://oxleas.nhs.uk
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS
Access-Control-Allow-Headers: x-requested-with, x-xsrfp
Access-Control-Max-Age: 15
Allow: GET, POST, PUT, OPTIONS
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
cache-control: no-cache, no-store, must-revalidate, max-age=0
Content-Security-Policy: default-src 'self' region1.analytics.google.com *.trac.jobs *.doubleclick.net *.googleapis.com *.google-analytics.com *.elfsight.com *.vimeo.com;    script-src 'self' *.gtranslate.net cdn.gtranslate.net *.trac.jobs *.googletagmanager.com *.google.com *.gstatic.com *.ytimg.com *.google.com *.googleapis.com *.google-analytics.com *.twitter.com *.youtube.com *.cqc.org.uk *.elfsight.com 'unsafe-eval' 'unsafe-inline';    style-src 'self' *.trac.jobs *.googleapis.com *.twitter.com *.googleapis.com *.cqc.org.uk *.gstatic.com 'unsafe-inline';    img-src * data:;     media-src 'self' *.youtube.com *.youtube-nocookie.com *.vimeo.com *.vimeocdn.com *.ci.vimeows.com;    object-src 'self' *.googlevideo.com *.ytimg.com *.youtube.com *.youtube-nocookie.com *.vimeo.com *.vimeocdn.com *.ci.vimeows.com;    frame-src 'self' *.pagetiger.com vimeo.com player.vimeo.com *.vimeo.com *.vimeocdn.com *.ci.vimeows.com *.youtube.com *.youtube-nocookie.com *.twitter.com *.google.com 'unsafe-inline';    form-action 'self';    frame-ancestors 'none';    base-uri 'self';    font-src 'self' *.gstatic.com *.googleapis.com;    worker-src 'none';
X-Cache: MISS
Content-Language: en-GB
Set-Cookie: JSESSIONID=01D318F9527C88E5507BFF1A8009FC2C; Path=/; HttpOnly; Secure
Vary: Accept-Encoding
Content-Encoding: gzip
X-Responder: HP2
Set-Cookie: TS01c4844b=013f787d5869f9bb2bc5f88ae95966f4d27c3a1f697fc0b8d1ca64746678d9c5e18e91b1f13cff88b8b24d1e5aaa3d545db8a2cfc3; Path=/; Secure; HttpOnly; SameSite=Strict; 
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN