Jwatch.org - Secure.jwatch.org

server: CloudFront
date: Mon, 29 Dec 2025 15:25:03 GMT
content-length: 0
location: https://clinician.nejm.org
cache-control: no-cache
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 f70528232f16ec1000882c5d6b401136.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA56-P13
x-amz-cf-id: xjNvb1DvT6GR8FpO4VXdtKsVpucSnrFC9W1CUKfJ6FXTkN-rGvOHdg==

HTTP/2 200 
date: Mon, 29 Dec 2025 15:25:05 GMT
content-type: text/html; charset=utf-8
x-ratelimit-remaining-second: 599
x-ratelimit-limit-second: 600
ratelimit-limit: 600
ratelimit-remaining: 599
ratelimit-reset: 1
content-security-policy: base-uri 'self'; connect-src 'self' *.nejmgroup.org *.adobedtm.com *.adtrafficquality.google *.amazonaws.com *.b2c.com *.blueconic.net *.demdex.net *.doubleclick.net *.doubleverify.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.janrain.com *.janraincapture.com *.jwplayer.com *.jwpsrv.com *.massmed.org *.microsoft.com *.microsoftonline.com *.mms.org *.nejm-dev.org *.nejm-qa.org *.nejm-xqa.org *.nejm.org *.nejmgroup-dev.org *.nejmgroup-production.org *.nejmgroup-qa.org *.newrelic.com *.nr-data.net *.qualtrics.com *.recaptcha.net *.rpxnow.com *.trustarc.com *.typekit.net browser-intake-datadoghq.com http-inputs-mms.splunkcloud.com mmsngaa.sc.omtrdc.net; default-src 'self' MDZjZGUzYzUtZGQzYi00ZTZkLWE4NDktN2YwYTY5NDgwYTBk; font-src 'self' data: *.google.com *.gstatic.com *.janrain.com *.janraincapture.com *.nejm-dev.org *.nejm-qa.org *.nejm-xqa.org *.nejm.org *.nejmgroup-dev.org *.nejmgroup-production.org *.nejmgroup-qa.org *.newrelic.com *.nr-data.net *.recaptcha.net *.rpxnow.com *.trustarc.com *.typekit.net fonts.googleapis.com fonts.gstatic.com; frame-src 'self' *.2mdn.net *.adtrafficquality.google *.demdex.net *.doubleclick.net *.g.doubleclick.net *.google.com *.googleadservices.com *.googletagservices.com *.jwplayer.com *.qualtrics.com *.recaptcha.net *.safeframe.googlesyndication.com *.trustarc.com *.youtube.com i.ytimg.com player.vimeo.com s.ytimg.com vimeo.com www.podbean.com; img-src 'self' blob: data: *.2mdn.net *.adtrafficquality.google *.demdex.net *.doubleclick.net *.everesttech.net *.evidon.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.janrain.com *.janraincapture.com *.jwplayer.com *.jwpltx.com *.jwpsrv.com *.mms.org *.nejm-dev.org *.nejm-qa.org *.nejm-shs.org *.nejm-xqa.org *.nejm.org *.nejmcareercenter.org *.nejmgroup-dev.org *.nejmgroup-production.org *.nejmgroup-qa.org *.nejmgroup-shs.org *.nejmgroup.org *.newrelic.com *.nr-data.net *.omtrdc.net *.qualtrics.com *.recaptcha.net *.rpxnow.com *.trustarc.com images.unsplash.com s3.amazonaws.com thrtle.com; media-src 'self' blob: *.cloudinary.com *.doubleclick.net *.g.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com *.jwplayer.com *.jwpsrv.com *.nejm-dev.org *.nejm-qa.org *.nejm-xqa.org *.nejm.org *.nejmgroup-dev.org *.nejmgroup-qa.org *.nejmgroup.org; object-src 'self' blob: data: *.doubleclick.net *.g.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com *.janrain.com *.janraincapture.com *.microsoftonline.com *.nejm-dev.org *.nejm-qa.org *.nejm-xqa.org *.nejm.org *.newrelic.com *.nr-data.net *.recaptcha.net *.rpxnow.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.2mdn.net *.adobedtm.com *.adtrafficquality.google *.b2c.com *.blueconic.net *.doubleclick.net *.doubleverify.com *.evidon.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.janrain.com *.janraincapture.com *.jwpcdn.com *.jwplayer.com *.jwplatform.com *.nejm-dev.org *.nejm-qa.org *.nejm-xqa.org *.nejm.org *.nejmcareercenter.org *.nejmgroup-dev.org *.nejmgroup-production.org *.nejmgroup-qa.org *.nejmgroup.org *.newrelic.com *.nr-data.net *.qualtrics.com *.recaptcha.net *.rpxnow.com *.trustarc.com *.youtube.com ajax.googleapis.com cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' *.evidon.com *.google.com *.gstatic.com *.janrain.com *.janraincapture.com *.nejm-dev.org *.nejm-qa.org *.nejm-xqa.org *.nejm.org *.nejmgroup-dev.org *.nejmgroup-production.org *.nejmgroup-qa.org *.nejmgroup-shs.org *.nejmgroup.org *.recaptcha.net *.rpxnow.com *.typekit.net fonts.googleapis.com;
set-cookie: onepub-cookie=eyJhbGciOiJIUzI1NiJ9.eyJicm93c2VyU2Vzc2lvbklkIjoiZTA2MjJiYTYtMDJhMy00OWIwLWE3OTYtMTgxNTAzYzYwYWQ3IiwiaXNNdWx0aUF1dGgiOmZhbHNlLCJpYXQiOjE3NjcwMjE5MDUsImV4cCI6MTc2OTYxMzkwNSwianRpIjoiOWY4ODkwZjMtZmNmOC00ZTQzLTkyMGUtODQxOTc2YzZiMDkxIn0.2RcDFmQZ-Lc4f3v3-UQAg8fpI254PT7zqPDm8ROP1Us; Path=/; Expires=Wed, 28 Jan 2026 15:25:05 GMT; Max-Age=2592000; Secure; HttpOnly; SameSite=lax
set-cookie: correlation-id=ee6d7850-ad07-4b60-b060-e56518d52609; Path=/
x-middleware-request-access-control-allow-credentials: true
x-middleware-request-access-control-allow-headers: *
x-middleware-request-access-control-allow-methods: *
x-middleware-request-access-control-allow-origin: *
x-middleware-request-content-security-policy: base-uri 'self'; connect-src 'self' *.nejmgroup.org *.adobedtm.com *.adtrafficquality.google *.amazonaws.com *.b2c.com *.blueconic.net *.demdex.net *.doubleclick.net *.doubleverify.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.janrain.com *.janraincapture.com *.jwplayer.com *.jwpsrv.com *.massmed.org *.microsoft.com *.microsoftonline.com *.mms.org *.nejm-dev.org *.nejm-qa.org *.nejm-xqa.org *.nejm.org *.nejmgroup-dev.org *.nejmgroup-production.org *.nejmgroup-qa.org *.newrelic.com *.nr-data.net *.qualtrics.com *.recaptcha.net *.rpxnow.com *.trustarc.com *.typekit.net browser-intake-datadoghq.com http-inputs-mms.splunkcloud.com mmsngaa.sc.omtrdc.net; default-src 'self' MDZjZGUzYzUtZGQzYi00ZTZkLWE4NDktN2YwYTY5NDgwYTBk; font-src 'self' data: *.google.com *.gstatic.com *.janrain.com *.janraincapture.com *.nejm-dev.org *.nejm-qa.org *.nejm-xqa.org *.nejm.org *.nejmgroup-dev.org *.nejmgroup-production.org *.nejmgroup-qa.org *.newrelic.com *.nr-data.net *.recaptcha.net *.rpxnow.com *.trustarc.com *.typekit.net fonts.googleapis.com fonts.gstatic.com; frame-src 'self' *.2mdn.net *.adtrafficquality.google *.demdex.net *.doubleclick.net *.g.doubleclick.net *.google.com *.googleadservices.com *.googletagservices.com *.jwplayer.com *.qualtrics.com *.recaptcha.net *.safeframe.googlesyndication.com *.trustarc.com *.youtube.com i.ytimg.com player.vimeo.com s.ytimg.com vimeo.com www.podbean.com; img-src 'self' blob: data: *.2mdn.net *.adtrafficquality.google *.demdex.net *.doubleclick.net *.everesttech.net *.evidon.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.janrain.com *.janraincapture.com *.jwplayer.com *.jwpltx.com *.jwpsrv.com *.mms.org *.nejm-dev.org *.nejm-qa.org *.nejm-shs.org *.nejm-xqa.org *.nejm.org *.nejmcareercenter.org *.nejmgroup-dev.org *.nejmgroup-production.org *.nejmgroup-qa.org *.nejmgroup-shs.org *.nejmgroup.org *.newrelic.com *.nr-data.net *.omtrdc.net *.qualtrics.com *.recaptcha.net *.rpxnow.com *.trustarc.com images.unsplash.com s3.amazonaws.com thrtle.com; media-src 'self' blob: *.cloudinary.com *.doubleclick.net *.g.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com *.jwplayer.com *.jwpsrv.com *.nejm-dev.org *.nejm-qa.org *.nejm-xqa.org *.nejm.org *.nejmgroup-dev.org *.nejmgroup-qa.org *.nejmgroup.org; object-src 'self' blob: data: *.doubleclick.net *.g.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com *.janrain.com *.janraincapture.com *.microsoftonline.com *.nejm-dev.org *.nejm-qa.org *.nejm-xqa.org *.nejm.org *.newrelic.com *.nr-data.net *.recaptcha.net *.rpxnow.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.2mdn.net *.adobedtm.com *.adtrafficquality.google *.b2c.com *.blueconic.net *.doubleclick.net *.doubleverify.com *.evidon.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.janrain.com *.janraincapture.com *.jwpcdn.com *.jwplayer.com *.jwplatform.com *.nejm-dev.org *.nejm-qa.org *.nejm-xqa.org *.nejm.org *.nejmcareercenter.org *.nejmgroup-dev.org *.nejmgroup-production.org *.nejmgroup-qa.org *.nejmgroup.org *.newrelic.com *.nr-data.net *.qualtrics.com *.recaptcha.net *.rpxnow.com *.trustarc.com *.youtube.com ajax.googleapis.com cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' *.evidon.com *.google.com *.gstatic.com *.janrain.com *.janraincapture.com *.nejm-dev.org *.nejm-qa.org *.nejm-xqa.org *.nejm.org *.nejmgroup-dev.org *.nejmgroup-production.org *.nejmgroup-qa.org *.nejmgroup-shs.org *.nejmgroup.org *.recaptcha.net *.rpxnow.com *.typekit.net fonts.googleapis.com;
x-middleware-request-strict-transport-security: max-age=31536000; includeSubDomains; preload
x-middleware-request-x-content-type-options: nosniff
x-middleware-request-x-frame-options: SAMEORIGIN
x-middleware-request-x-nonce: MDZjZGUzYzUtZGQzYi00ZTZkLWE4NDktN2YwYTY5NDgwYTBk
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
link: </_next/static/css/0320a50b04ffbb43.css>; rel=preload; as="style", </_next/static/css/3a8daec661375152.css>; rel=preload; as="style", </_next/static/css/d71e53db5d573933.css>; rel=preload; as="style"
x-powered-by: Next.js
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-encoding: gzip
x-envoy-upstream-service-time: 1672
server: envoy
vary: Origin
access-control-allow-credentials: true
reporting-endpoints: default="https://mms-org.uriports.com/reports"
report-to: {"group":"default","max_age":10886400,"endpoints":[{"url":"https://mms-org.uriports.com/reports"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true,"failure_fraction":0.5}
x-kong-upstream-latency: 1672
x-kong-proxy-latency: 1
via: 1.1 kong/3.9.1
x-kong-request-id: e17ff358aa8e0d227ebc6f56232e8a7e