HTTP/1.0 200 OK
Cache-Control:private,max-age=0;
X-Frame-Options:SAMEORIGIN
X-Content-Type-Options:nosniff
X-XSS-Protection:1; mode=block
Content-Security-Policy:default-src 'self' blob: 'unsafe-inline' 'unsafe-eval';img-src * data: 'unsafe-inline'
Strict-Transport-Security:max-age=2592000; includeSubdomains
Referrer-Policy: no-referrer
Set-Cookie: lang=eng; path=/;HttpOnly;
Content-type:text/html;charset=UTF-8;