HTTP/2 200 content-type: text/html; charset=utf-8 report-to: {"group":"default","max_age":3600,"endpoints":[{"url":"https://default.bbc-reporting-api.app/report-endpoint"}],"include_subdomains":true} nel: {"report_to":"default","max_age":604800,"include_subdomains":true,"failure_fraction":0.01} cache-control: no-cache,private,no-store x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 0 x-permitted-cross-domain-policies: none content-security-policy: base-uri 'self';frame-src https://www.bbc.com;child-src edigitalsurvey.com https://www.bbc.com;connect-src 'self' *.api.bbci.co.uk a1.api.bbc.com wss://*.api.bbci.co.uk *.bbc.co.uk www.bbc.com logx.optimizely.com api.pwnedpasswords.com *.awswaf.com;default-src 'none';font-src 'self' *.files.bbci.co.uk;form-action 'self' http://bbc.co.uk https://bbc.co.uk http://*.bbc.co.uk https://*.bbc.co.uk http://bbc.com https://bbc.com http://*.bbc.com https://*.bbc.com;img-src 'self' data: *.files.bbci.co.uk ichef.bbci.co.uk *.bbci.co.uk *.ati-host.net a1.api.bbc.com *.bbc.co.uk;report-to default;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.files.bbci.co.uk *.bbci.co.uk *.bbc.co.uk cdn.optimizely.com optimizely.s3.amazonaws.com *.awswaf.com;style-src 'self' 'unsafe-inline' *.files.bbci.co.uk *.bbci.co.uk *.bbc.co.uk etag: W/"30b4f-R7GneWIvxGS5wJo1dTPK/HpGFrY" set-cookie: ckns_mvt=78dc5b9f-68ba-4e1a-8ec9-5ae5162805be; Max-Age=31536000; Domain=.bbc.com; Path=/; Expires=Mon, 19 Jul 2027 06:53:29 GMT; Secure; SameSite=None link: ; rel=preconnect; crossorigin link: ; rel=preconnect; crossorigin origin-agent-cluster: ?0 req-svc-chain: FASTLY,GTM via: 1.1 BBC-GTM, 1.1 varnish x-bbc-edge-cache-status: MISS x-bbc-origin-response-status: 200 server: BBC-GTM strict-transport-security: max-age=31536000; includeSubDomains; preload fastly-restarts: 1 x-fastly-cache-reason: SET-COOKIE accept-ranges: bytes date: Sun, 19 Jul 2026 06:53:29 GMT x-fastly-cache-status: PASS x-served-by: cache-ewr-kewr1740043-EWR x-cache: MISS x-cache-hits: 0 x-timer: S1784444009.393506,VS0,VE472 x-fastly-pre-flight-cache: MISS, HIT x-fastly-pre-flight-cache-status: HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 199503