HTTP/1.1 200 OK
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.facebook.net *.facebook.com *.fbcdn.net *.tableau.com app.icontact.com *.gstatic.com *.twitter.com *.ws.frb.org *.frswebservices.org *.bostonfed.org bostonfed *.federalreserve.org *.google-analytics.com *.googleapis.com cdn.syndication.twimg.com *.brightcove.net *.brightcove.com *.ytimg.com *.googletagmanager.com *.google-analytics.com *.taleo.net *.google.com *.highcharts.com; style-src 'self' 'unsafe-inline' *.facebook.net *.facebook.com *.fbcdn.net *.tableau.com app.icontact.com *.twitter.com *.ws.frb.org *.frswebservices.org *.bostonfed.org bostonfed *.googleapis.com *.taleo.net *.google.com *.highcharts.com; img-src * data:; media-src * data:; connect-src 'self'; font-src 'self' *.facebook.net *.facebook.com *.fbcdn.net *.tableau.com app.icontact.com *.twitter.com *.ws.frb.org *.frswebservices.org *.bostonfed.org bostonfed *.gstatic.com *.taleo.net *.google.com data:; frame-src 'self' *.facebook.net *.facebook.com *.fbcdn.net *.tableau.com app.icontact.com *.twitter.com *.youtube.com *.brightcove.net *.brightcove.com *.ws.frb.org *.frswebservices.org *.bostonfed.org *.taleo.net *.google.com data:;
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
Strict-Transport-Security: max-age=31536000
X-AspNetMvc-Version: 5.2
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Server: B15
X-Xss-Protection: 1; mode=block
Cache-Control: private, no-cache
Date: Mon, 29 Jun 2020 15:53:25 GMT
Transfer-Encoding:  chunked
Connection: keep-alive
Connection: Transfer-Encoding