Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 25 Nov 2020 08:44:16 GMT
Content-Security-Policy: default-src 'self' https://forms.cwp.gov.sg/; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://assets.adobedtm.com https://assets.wogaa.sg; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://assets.wogaa.sg/; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://assets.wogaa.sg/fonts/LibreFranklin/; img-src 'self' http://www.cdc.gov.sg/images/ http://www.cdc.org.sg/images/ https://www-cdc-gov-sg.cwp.sg/images/ *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com https://assets.wogaa.sg/sentiments/rating-assets/; media-src 'self' data: blob:; frame-src 'self' https://forms.cwp.gov.sg/ https://*.facebook.com/ https://*.facebook.net/ https://www.google.com/ https://www.youtube.com/ https://wogaa.demdex.net/; frame-ancestors 'self' https://forms.cwp.gov.sg/; child-src 'self' https://forms.cwp.gov.sg/ https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.wogaa.sg/ https://dpm.demdex.net/;
Referrer-Policy: no-referrer-when-downgrade
Set-Cookie: rp_www.cdc.gov.sg=2ef6318fb3f202e8472bf3782eccba4c; httponly; path=/; secure; HttpOnly
Set-Cookie: AWSALB=bngOpbiYzNablPmGmyaAe+khq93UFqsPqCIa2AItIeplKteI2mmOzGqxCmnFQVFf4gOGv5w4qIsyrqAa3/6wt+IkrO+21EJygkPWgicxocQbzpH4YinurFPBDO7U; Expires=Wed, 02 Dec 2020 08:44:16 GMT; Path=/
Set-Cookie: AWSALBCORS=bngOpbiYzNablPmGmyaAe+khq93UFqsPqCIa2AItIeplKteI2mmOzGqxCmnFQVFf4gOGv5w4qIsyrqAa3/6wt+IkrO+21EJygkPWgicxocQbzpH4YinurFPBDO7U; Expires=Wed, 02 Dec 2020 08:44:16 GMT; Path=/; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
X-XSS-Protection: 1; mode=block
X-FRAME-OPTIONS: SAMEORIGIN
X-Content-Type-Options: nosniff
Cache-Control: max-age=86400, public
X-Access-Control-Allow-Origin: *
Vary: *
X-Cache: Miss from cloudfront
Via: 1.1 bdfe34c94134f86b07ebb7714d12d095.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: EWR52-C1
X-Amz-Cf-Id: FKJaneqE1ps-SApKBrS3yU-Mqrx_ZxB0nNS7FKPm5SyWM1m5wklDxg==
x-encoded-content-encoding: gzip