HTTP/2 200
content-type: text/html; charset=utf-8
report-to: {"group":"default","max_age":3600,"endpoints":[{"url":"https://default.bbc-reporting-api.app/report-endpoint"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":604800,"include_subdomains":true,"failure_fraction":0.01}
cache-control: no-cache,private,no-store
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
x-permitted-cross-domain-policies: none
content-security-policy: base-uri 'self';frame-src https://www.bbc.com;child-src edigitalsurvey.com https://www.bbc.com;connect-src 'self' *.api.bbci.co.uk a1.api.bbc.com wss://*.api.bbci.co.uk *.bbc.co.uk www.bbc.com logx.optimizely.com api.pwnedpasswords.com *.awswaf.com;default-src 'none';font-src 'self' *.files.bbci.co.uk;form-action 'self' http://bbc.co.uk https://bbc.co.uk http://*.bbc.co.uk https://*.bbc.co.uk http://bbc.com https://bbc.com http://*.bbc.com https://*.bbc.com;img-src 'self' data: *.files.bbci.co.uk ichef.bbci.co.uk *.bbci.co.uk *.ati-host.net a1.api.bbc.com *.bbc.co.uk;report-to default;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.files.bbci.co.uk *.bbci.co.uk *.bbc.co.uk cdn.optimizely.com optimizely.s3.amazonaws.com *.awswaf.com;style-src 'self' 'unsafe-inline' *.files.bbci.co.uk *.bbci.co.uk *.bbc.co.uk
etag: W/"30b26-jIzfjDvIRfFeyFa7/b95CdmZoKc"
set-cookie: ckns_mvt=7a418cc7-c6b5-4e03-8f2a-71fae443fc64; Max-Age=31536000; Domain=.bbc.com; Path=/; Expires=Mon, 19 Jul 2027 06:52:39 GMT; Secure; SameSite=None
link: ; rel=preconnect; crossorigin
link: ; rel=preconnect; crossorigin
origin-agent-cluster: ?0
req-svc-chain: FASTLY,GTM
via: 1.1 BBC-GTM, 1.1 varnish
x-bbc-edge-cache-status: MISS
x-bbc-origin-response-status: 200
server: BBC-GTM
strict-transport-security: max-age=31536000; includeSubDomains; preload
fastly-restarts: 1
x-fastly-cache-reason: SET-COOKIE
accept-ranges: bytes
date: Sun, 19 Jul 2026 06:52:39 GMT
x-fastly-cache-status: PASS
x-served-by: cache-nyc-kteb1890080-NYC
x-cache: MISS
x-cache-hits: 0
x-timer: S1784443959.185568,VS0,VE157
x-fastly-pre-flight-cache: HIT, HIT
x-fastly-pre-flight-cache-status: HIT-CLUSTER
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 199462