HTTP/1.1 200 OK
Server: nginx
Date: Thu, 11 Jun 2020 19:03:33 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: FluentLocale=en_US; expires=Wed, 09-Sep-2020 19:03:32 GMT; Max-Age=7776000; path=/
Set-Cookie: PHPSESSID=ae895baad495458d6288ca6102ee0425; path=/; HttpOnly
Vary: X-Forwarded-Protocol,Accept-Encoding,User-Agent
Last-Modified: Sat, 30 May 2020 13:41:03 GMT
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: Thu, 11 Jun 2020 19:03:32 GMT
Strict-Transport-Security: max-age=31536000; includeSubdomains; 
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' *.projects-abroad.net ssl.google-analytics.com tagmanager.google.com fonts.googleapis.com www.google-analytics.com www.gstatic.com fonts.gstatic.com connect.facebook.net www.googletagmanager.com cdn.cookielaw.org www.googleadservices.com googleads.g.doubleclick.net static.hotjar.com script.hotjar.com js.hs-scripts.com js.hscta.net js.hsforms.net forms.hsforms.com js.hs-analytics.net cta-service-cms2.hubspot.com d10lpsik1i8c69.cloudfront.net code.jquery.com maxcdn.bootstrapcdn.com ajax.googleapis.com cdnjs.cloudflare.com native.testing.equest.com www.google.com *.docusign.net www.youtube.com youtu.be player.vimeo.com docs.google.com 'unsafe-inline' 'unsafe-eval' data: font;frame-src 'self' www.google.com www.youtube.com www.facebook.com staticxx.facebook.com orangehrm.orangehrm.com vars.hotjar.com bid.g.doubleclick.net forms.hsforms.com native.testing.equest.com *.amazonaws.com;connect-src 'self' *.orangehrm.com www.google-analytics.com settings.luckyorange.net vc.hotjar.com vc.hotjar.io in.hotjar.com;worker-src blob: 'self';img-src * 'self' www.googletagmanager.com ssl.gstatic.com www.gstatic.com www.google-analytics.com googleads.g.doubleclick.net www.google.com data: blob:
X-XSS-Protection: 1; mode=block
client_max_body_size: 50M
Public-Key-Pins: pin-sha256="blgmjf3Tb3C0sUqb7jo4axiZAnr327fX0ycrUGqjw2k=";pin-sha256="puCdyuZdXoDc5jSdcGKU6mdjd0VNq16yoaO2BcDF36A=";pin-sha256="yQhO6YqQX5Y/NxyHAjXnI3jOtYWUm/TtRr666RunXRg="; pin-sha256="Slt48iBVTjuRQJTjbzopminRrHSGtndY0/sj0lFf9Qk="; max-age=63072000; includeSubDomains