Date: Thu, 26 Nov 2020 14:28:12 GMT
Server: nginx
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Frame-Options: SAMEORIGIN
X-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Referrer-Policy: same-origin
Cache-Control: public; max-age=31536000
Content-Type: text/html; charset=UTF-8
X-Powered-By: PHP/7.4.12
X-Pingback: https://flexicar.com.au/xmlrpc.php
Link: ; rel="https://api.w.org/"
Link: ; rel="alternate"; type="application/json"
Link: ; rel=shortlink
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Security-Policy: default-src 'none';                     base-uri 'none';                     connect-src 'self' *.google.com *.googletagmanager.com *.google-analytics.com *.flexicar.com.au flexicar.com.au;                     font-src 'self' *.typekit.net *.gstatic.com data:;                     form-action 'self';                     frame-ancestors 'self';                     frame-src 'self' *.vimeo.com;                     img-src 'self' *.gravatar.com *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com *.youtube.com hertz-australia.eileo.org ps.w.org data:;                     script-src 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.w3.org *.flexicar.com.au;                     style-src 'self' 'unsafe-inline';                     style-src-elem 'self' 'unsafe-inline' *.typekit.net *.googleapis.com;                     upgrade-insecure-requests
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
x-encoded-content-encoding: gzip