Sfstandard.com

server: nginx
date: Mon, 24 Jun 2024 19:11:52 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Accept-Encoding
x-powered-by: Express
content-security-policy: default-src 'self' *.sfstandard.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.sfstandard.com iframely.shorthand.com platform.twitter.com cdn.ampproject.org www.instagram.com www.tiktok.com citizen.com www.gofundme.com embed.typeform.com embed.reddit.com pym.nprapps.org static.dwcdn.net platform.instagram.com *.ttwstatic.com analytics.shorthand.com www.youtube.com player.vimeo.com d3js.org cdn.parsely.com dash.parsely.com ak.sail-horizon.com www.googletagmanager.com *.google-analytics.com static.ads-twitter.com connect.facebook.net static.hotjar.com tru.am *.googlesyndication.com *.googleadservices.com script.hotjar.com www.google.com www.gstatic.com *.fillout.com tiktokcdn-us.com tiktokcdn.com *.tiktokcdn-us.com *.tiktokcdn.com opinionstage.com *.opinionstage.com documentcloud.org *.documentcloud.org *.p-n.io ketchcdn.com *.ketchcdn.com ketchjs.com *.ketchjs.com *.elfsight.com *.googleapis.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.sfstandard.com iframely.shorthand.com platform.twitter.com cdn.ampproject.org www.instagram.com www.tiktok.com citizen.com www.gofundme.com embed.typeform.com embed.reddit.com pym.nprapps.org static.dwcdn.net platform.instagram.com *.ttwstatic.com analytics.shorthand.com www.youtube.com player.vimeo.com d3js.org cdn.parsely.com dash.parsely.com ak.sail-horizon.com www.googletagmanager.com *.google-analytics.com static.ads-twitter.com connect.facebook.net static.hotjar.com tru.am *.googlesyndication.com *.googleadservices.com script.hotjar.com www.google.com www.gstatic.com *.fillout.com tiktokcdn-us.com tiktokcdn.com *.tiktokcdn-us.com *.tiktokcdn.com opinionstage.com *.opinionstage.com documentcloud.org *.documentcloud.org *.p-n.io ketchcdn.com *.ketchcdn.com ketchjs.com *.ketchjs.com *.elfsight.com *.googleapis.com; style-src 'self' 'unsafe-inline' *.sfstandard.com fonts.googleapis.com *.ttwstatic.com embed.typeform.com opinionstage.com *.opinionstage.com tiktokcdn-us.com *.tiktokcdn-us.com ketchcdn.com *.ketchcdn.com ketchjs.com *.ketchjs.com; img-src 'self' data: https:; font-src 'self' data: *.sfstandard.com fonts.gstatic.com use.typekit.net; connect-src 'self' *.sfstandard.com *.analytics.google.com analytics.google.com *.google-analytics.com google-analytics.com api.sail-personalize.com api.sail-track.com *.ingest.sentry.io pagead2.googlesyndication.com *.g.doubleclick.net api.maptiler.com beacon.tru.am *.parsely.com www.facebook.com vc.hotjar.io metrics.hotjar.io content.hotjar.io ws.hotjar.com adservice.google.com wss://ws.hotjar.com vimeo.com api.typeform.com noembed.com cdn2.sfstandard.com cdn3.sfstandard.com opinionstage.com *.opinionstage.com *.p-n.io ketchcdn.com *.ketchcdn.com ketchjs.com *.ketchjs.com poll.fm polls.polldaddy.com api.crowdsignal.com *.elfsight.com *.googleapis.com; frame-src 'self' *.sfstandard.com *.youtube.com youtube.com sfstandard.github.io player.vimeo.com datawrapper.dwcdn.net bandcamp.com www.google.com w.soundcloud.com playlist.megaphone.fm omny.fm open.spotify.com trytako.com www.trytako.com abc7news.com www.facebook.com embed.documentcloud.org nextdoor.com embed.reddit.com platform.twitter.com www.tiktok.com calmatters-reparations-calculator.netlify.app www.googletagmanager.com www.google.com *.doubleclick.net www.instagram.com iframely.shorthand.com citizen.com form.typeform.com dash.parsely.com opinionstage.com *.opinionstage.com *.fillout.com; object-src 'self' *.sfstandard.com data:; media-src 'self' *.sfstandard.com blob:; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content; report-uri https://o4504205219004416.ingest.sentry.io/api/4504205221232640/security/?sentry_key=642f02aaa96c4e679673d2642c3c2782; report-to csp-endpoint
report-to: {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://o4504205219004416.ingest.sentry.io/api/4504205221232640/security/?sentry_key=642f02aaa96c4e679673d2642c3c2782"}]}
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 0
set-cookie: zephr-session=66fdcca3-8d90-4bf6-b110cd7113fabb74; Max-Age=34560000; Path=/; Expires=Tue, 29 Jul 2025 19:11:52 GMT
content-encoding: br
x-rq: mdw2 96 184 443
accept-ranges: bytes
x-cache: BYPASS
cache-control: no-cache, must-revalidate, max-age=0, no-store