HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: must-revalidate, no-cache, private
Date: Thu, 30 May 2019 10:56:43 GMT
X-Drupal-Dynamic-Cache: UNCACHEABLE
Link: </node/1>; rel="revision"
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
X-Generator: Drupal 8 (https://www.drupal.org)
Strict-Transport-Security: max-age=0
X-Drupal-Cache: HIT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: origin-when-cross-origin
Access-Control-Allow-Origin: http://localhost
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: CustomHeader
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: img-src * 'self' data:; default-src * 'self' gap: data:; style-src 'self' 'unsafe-inline' ajax.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com payments.worldpay.com hello.myfonts.net cdnjs.cloudflare.com fonts.googleapis.com; script-src 'self' www.googleadservices.com bat.bing.com dev.visualwebsiteoptimizer.com widget.trustpilot.com use.typekit.net snapwidget.com widgets.pinterest.com cdn.syndication.twimg.com payments.worldpay.com code.jquery.com log.pinterest.com www.youtube.com/iframe_api s.ytimg.com js.stormiq.com www.googletagmanager.com t1.stormiq.com tracking1.force24.co.uk cdnjs.cloudflare.com *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com *.addthisedge.com *.addthis.com *.twitter.com *.facebook.net *.facebook.com 'unsafe-inline' 'unsafe-eval'; frame-ancestors http://*.brass-digital.com https://*.hammonds-uk.com http://*.hammonds-uk.com http://*.hammonds-uk.com:8079 https://*.hammonds-uk.com:8079 http://*.hammonds-uk.com:8077 https://*.hammonds-uk.com:8077 http://hammonds.local https://www.hammonds-uk.com/my-account;