HTTP/1.1 200 OK
Date: Sat, 02 Dec 2023 12:57:22 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Fri, 01 Dec 2023 06:15:37 GMT
Expires: Fri, 08 Dec 2023 06:15:36 GMT
Etag: "89fa961889dec982d7dfeb29ed0473120f5db512"
Cache-Control: max-age=493694,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 82f3bc383b487130-OSL

HTTP/1.1 200 OK
Connection: Keep-Alive
Expires: Fri, 17 Nov 2023 12:57:22 GMT
Date: Sat, 02 Dec 2023 12:57:23 GMT
Content-Type: text/html; charset=utf-8
Cache-Control: private, max-age=0
Last-Modified: Sat, 02 Dec 2023 12:57:22 GMT
X-SharePointHealthScore: 0
SPRequestGuid: 7bccf3a0-cf9b-60e3-f8e8-461a748a753a
request-id: 7bccf3a0-cf9b-60e3-f8e8-461a748a753a
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 905
SPIisLatency: 2
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 32954
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 11:16:17 GMT
expires: Sat, 30 Nov 2024 11:16:17 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 92467
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 02 Dec 2023 12:57:24 GMT
expires: Sat, 02 Dec 2023 12:57:24 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 87994
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Date: Sat, 02 Dec 2023 12:57:24 GMT
Content-Type: text/css
ETag: "0566fcfe8acd81:0"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Wed, 10 Aug 2022 18:41:32 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Date: Sat, 02 Dec 2023 12:57:24 GMT
Content-Type: application/javascript
ETag: "0740658b0da1:0"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Mon, 16 Oct 2023 23:49:26 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 762
Expires: Fri, 17 Nov 2023 12:57:25 GMT
Date: Sat, 02 Dec 2023 12:57:25 GMT
Content-Type: application/javascript
ETag: "{B38E957F-6FE9-410A-81ED-D4B4308588BB},9"
Accept-Ranges: bytes
Cache-Control: max-age=86400
Last-Modified: Fri, 31 May 2013 06:58:59 GMT
X-SharePointHealthScore: 0
ResourceTag: rt:B38E957F-6FE9-410A-81ED-D4B4308588BB@00000000009
Content-Disposition: attachment; filename*=utf-8''mavention%2esharepoint%2enewpublishingpage%2epagecomponent%2eloader%2ejs; filename="mavention.sharepoint.newpublishingpage.pagecomponent.loader.js"
X-Download-Options: noopen
Public-Extension: http://schemas.microsoft.com/repl-2
SPRequestGuid: 7cccf3a0-0f63-60e3-f8e8-486da650400f
request-id: 7cccf3a0-0f63-60e3-f8e8-486da650400f
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 173
SPIisLatency: 15
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 456
Date: Sat, 02 Dec 2023 12:57:25 GMT
Content-Type: application/javascript
ETag: "0318d3cce0da1:0"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Tue, 17 Oct 2023 07:47:54 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Date: Sat, 02 Dec 2023 12:57:25 GMT
Content-Type: application/javascript
ETag: "06bfdf2e94dd41:0"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Sun, 16 Sep 2018 18:20:30 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Expires: Sat, 30 Nov 2024 14:31:57 GMT
Date: Sat, 02 Dec 2023 12:57:25 GMT
Content-Type: application/x-javascript
Cache-Control: public
Last-Modified: Fri, 01 Dec 2023 14:31:57 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 814
Expires: Fri, 17 Nov 2023 12:57:26 GMT
Date: Sat, 02 Dec 2023 12:57:25 GMT
Content-Type: text/css
ETag: "{D0A3CAD1-1ED8-43B0-85F4-6860022CD226},1"
Accept-Ranges: bytes
Cache-Control: max-age=93600
Last-Modified: Wed, 11 May 2022 18:02:07 GMT
X-SharePointHealthScore: 0
ResourceTag: rt:D0A3CAD1-1ED8-43B0-85F4-6860022CD226@00000000001
Public-Extension: http://schemas.microsoft.com/repl-2
SPRequestGuid: 7cccf3a0-ff8e-60e3-f8e8-4e982e4420df
request-id: 7cccf3a0-ff8e-60e3-f8e8-4e982e4420df
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 171
SPIisLatency: 23
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding

HTTP/1.1 200 OK
Connection: Keep-Alive
Expires: Fri, 17 Nov 2023 12:57:26 GMT
Date: Sat, 02 Dec 2023 12:57:25 GMT
Content-Type: text/css
ETag: "{4988C04D-3556-4323-8107-1494BC1132CF},1"
Accept-Ranges: bytes
Cache-Control: max-age=93600
Last-Modified: Wed, 11 May 2022 18:01:45 GMT
X-SharePointHealthScore: 0
ResourceTag: rt:4988C04D-3556-4323-8107-1494BC1132CF@00000000001
Public-Extension: http://schemas.microsoft.com/repl-2
SPRequestGuid: 7cccf3a0-ff8e-60e3-f8e8-4559016cfc20
request-id: 7cccf3a0-ff8e-60e3-f8e8-4559016cfc20
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 74
SPIisLatency: 24
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 16231
Expires: Fri, 17 Nov 2023 12:57:27 GMT
Date: Sat, 02 Dec 2023 12:57:27 GMT
Content-Type: application/javascript
ETag: "{D667B8C5-9D31-4DDF-90DC-2EE03DF265C4},1"
Accept-Ranges: bytes
Cache-Control: max-age=86400
Last-Modified: Wed, 11 May 2022 18:02:04 GMT
X-SharePointHealthScore: 0
ResourceTag: rt:D667B8C5-9D31-4DDF-90DC-2EE03DF265C4@00000000001
Content-Disposition: attachment; filename*=utf-8''modernizr%2d2%2e0%2e6%2emin%2ejs; filename="modernizr-2.0.6.min.js"
X-Download-Options: noopen
Public-Extension: http://schemas.microsoft.com/repl-2
SPRequestGuid: 7cccf3a0-6fa5-60e3-f8e8-4d81ba6284bb
request-id: 7cccf3a0-6fa5-60e3-f8e8-4d81ba6284bb
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 215
SPIisLatency: 88
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Expires: Sat, 30 Nov 2024 14:31:57 GMT
Date: Sat, 02 Dec 2023 12:57:25 GMT
Content-Type: application/x-javascript
Cache-Control: public
Last-Modified: Fri, 01 Dec 2023 14:31:57 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 36521
Expires: Fri, 17 Nov 2023 12:57:27 GMT
Date: Sat, 02 Dec 2023 12:57:27 GMT
Content-Type: application/javascript
ETag: "{A06357D0-9454-43D2-85C0-061BFA86B3FB},1"
Accept-Ranges: bytes
Cache-Control: max-age=86400
Last-Modified: Wed, 11 May 2022 18:02:07 GMT
X-SharePointHealthScore: 0
ResourceTag: rt:A06357D0-9454-43D2-85C0-061BFA86B3FB@00000000001
Content-Disposition: attachment; filename*=utf-8''shadowbox%2ejs; filename="shadowbox.js"
X-Download-Options: noopen
Public-Extension: http://schemas.microsoft.com/repl-2
SPRequestGuid: 7cccf3a0-3fad-60e3-f8e8-456212b5b65b
request-id: 7cccf3a0-3fad-60e3-f8e8-456212b5b65b
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 135
SPIisLatency: 36
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 11258
Expires: Fri, 17 Nov 2023 12:57:27 GMT
Date: Sat, 02 Dec 2023 12:57:27 GMT
Content-Type: application/javascript
ETag: "{8ADF843F-2516-4F3A-A845-835E5F748123},1"
Accept-Ranges: bytes
Cache-Control: max-age=7200
Last-Modified: Wed, 11 May 2022 18:02:01 GMT
X-SharePointHealthScore: 0
ResourceTag: rt:8ADF843F-2516-4F3A-A845-835E5F748123@00000000001
Content-Disposition: attachment; filename*=utf-8''plugins%2ejs; filename="plugins.js"
X-Download-Options: noopen
Public-Extension: http://schemas.microsoft.com/repl-2
SPRequestGuid: 7cccf3a0-ffb7-60e3-f8e8-4fa6bb30d350
request-id: 7cccf3a0-ffb7-60e3-f8e8-4fa6bb30d350
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 104
SPIisLatency: 1
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Date: Sat, 02 Dec 2023 12:57:25 GMT
Content-Type: application/javascript
ETag: "08bef3ece0da1:0"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Tue, 17 Oct 2023 07:47:58 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 5045
Expires: Fri, 17 Nov 2023 12:57:27 GMT
Date: Sat, 02 Dec 2023 12:57:27 GMT
Content-Type: application/javascript
ETag: "{4E3662B9-917E-4FA0-AD3E-74B4F68C6CDA},1"
Accept-Ranges: bytes
Cache-Control: max-age=7200
Last-Modified: Wed, 11 May 2022 18:02:01 GMT
X-SharePointHealthScore: 0
ResourceTag: rt:4E3662B9-917E-4FA0-AD3E-74B4F68C6CDA@00000000001
Content-Disposition: attachment; filename*=utf-8''script%2ejs; filename="script.js"
X-Download-Options: noopen
Public-Extension: http://schemas.microsoft.com/repl-2
SPRequestGuid: 7cccf3a0-9fc8-60e3-f8e8-4d8dbd10345a
request-id: 7cccf3a0-9fc8-60e3-f8e8-4d8dbd10345a
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 141
SPIisLatency: 0
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 23063
Expires: Sat, 30 Nov 2024 14:31:57 GMT
Date: Sat, 02 Dec 2023 12:57:27 GMT
Content-Type: application/x-javascript
Cache-Control: public
Last-Modified: Fri, 25 Aug 2023 23:57:04 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 02 Dec 2023 12:57:27 GMT
expires: Sat, 02 Dec 2023 12:57:27 GMT
cache-control: private, max-age=900
last-modified: Sat, 02 Dec 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44452
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/1.1 200 OK
Connection: Keep-Alive
Expires: Fri, 17 Nov 2023 12:57:28 GMT
Date: Sat, 02 Dec 2023 12:57:28 GMT
Content-Type: text/css
ETag: "{4988C04D-3556-4323-8107-1494BC1132CF},1"
Accept-Ranges: bytes
Cache-Control: max-age=93600
Last-Modified: Wed, 11 May 2022 18:01:45 GMT
X-SharePointHealthScore: 0
ResourceTag: rt:4988C04D-3556-4323-8107-1494BC1132CF@00000000001
Public-Extension: http://schemas.microsoft.com/repl-2
SPRequestGuid: 7cccf3a0-9ff2-60e3-f8e8-461fd2b06e64
request-id: 7cccf3a0-9ff2-60e3-f8e8-461fd2b06e64
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 117
SPIisLatency: 123
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Date: Sat, 02 Dec 2023 12:57:28 GMT
Content-Type: text/css
ETag: "0566fcfe8acd81:0"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Wed, 10 Aug 2022 18:41:32 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 814
Expires: Fri, 17 Nov 2023 12:57:28 GMT
Date: Sat, 02 Dec 2023 12:57:28 GMT
Content-Type: text/css
ETag: "{D0A3CAD1-1ED8-43B0-85F4-6860022CD226},1"
Accept-Ranges: bytes
Cache-Control: max-age=93600
Last-Modified: Wed, 11 May 2022 18:02:07 GMT
X-SharePointHealthScore: 0
ResourceTag: rt:D0A3CAD1-1ED8-43B0-85F4-6860022CD226@00000000001
Public-Extension: http://schemas.microsoft.com/repl-2
SPRequestGuid: 7cccf3a0-9ff2-60e3-f8e8-40171b39971a
request-id: 7cccf3a0-9ff2-60e3-f8e8-40171b39971a
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 263
SPIisLatency: 125
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 456
Date: Sat, 02 Dec 2023 12:57:28 GMT
Content-Type: application/javascript
ETag: "0318d3cce0da1:0"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Tue, 17 Oct 2023 07:47:54 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 255
Expires: Fri, 17 Nov 2023 12:57:28 GMT
Date: Sat, 02 Dec 2023 12:57:28 GMT
Content-Type: text/css
ETag: "{F41FA5E0-A65D-4F0C-8430-69A1D0E7B31C},1"
Accept-Ranges: bytes
Cache-Control: max-age=93600
Last-Modified: Wed, 11 May 2022 18:01:44 GMT
X-SharePointHealthScore: 0
ResourceTag: rt:F41FA5E0-A65D-4F0C-8430-69A1D0E7B31C@00000000001
Public-Extension: http://schemas.microsoft.com/repl-2
SPRequestGuid: 7cccf3a0-9ff1-60e3-f8e8-409ed2a0ff75
request-id: 7cccf3a0-9ff1-60e3-f8e8-409ed2a0ff75
X-FRAME-OPTIONS: SAMEORIGIN
SPRequestDuration: 312
SPIisLatency: 108
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Expires: Fri, 17 Nov 2023 12:57:28 GMT
Date: Sat, 02 Dec 2023 12:57:28 GMT
Content-Type: application/json;odata=verbose;charset=utf-8
Cache-Control: private, max-age=0
Last-Modified: Sat, 02 Dec 2023 12:57:28 GMT
X-SharePointHealthScore: 0
X-SP-SERVERSTATE: ReadOnly=0
DATASERVICEVERSION: 3.0
SPClientServiceRequestDuration: 43
SPRequestDuration: 136
SPRequestGuid: 7dccf3a0-4f29-60e3-f8e8-4bbfad9760bf
request-id: 7dccf3a0-4f29-60e3-f8e8-4bbfad9760bf
X-FRAME-OPTIONS: SAMEORIGIN
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Date: Sat, 02 Dec 2023 12:57:29 GMT
Content-Type: image/png
ETag: "{DA76A166-CAA4-4109-A3FC-4D33DA1EE6BE},1pub"
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 11 May 2022 18:02:14 GMT
SPRequestGuid: 7dccf3a0-4f29-60e3-f8e8-4bdc88a17249
request-id: 7dccf3a0-4f29-60e3-f8e8-4bdc88a17249
X-FRAME-OPTIONS: SAMEORIGIN
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 959
Date: Sat, 02 Dec 2023 12:57:28 GMT
Content-Type: image/png
ETag: "{D4DF5BD5-93B2-4F70-A7C9-8C146A8BD458},1pub"
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 11 May 2022 18:01:49 GMT
SPRequestGuid: 7dccf3a0-4f29-60e3-f8e8-4a5251d1df62
request-id: 7dccf3a0-4f29-60e3-f8e8-4a5251d1df62
X-FRAME-OPTIONS: SAMEORIGIN
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding

HTTP/1.1 200 OK
Connection: Keep-Alive
Date: Sat, 02 Dec 2023 12:57:29 GMT
Content-Type: image/png
ETag: "{66299FEC-99E5-4568-A1D8-E458A48C2AEF},1pub"
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 11 May 2022 18:02:15 GMT
SPRequestGuid: 7dccf3a0-4f29-60e3-f8e8-4c71f4e45e1c
request-id: 7dccf3a0-4f29-60e3-f8e8-4c71f4e45e1c
X-FRAME-OPTIONS: SAMEORIGIN
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 1909
Date: Sat, 02 Dec 2023 12:57:29 GMT
Content-Type: image/png
ETag: "{D69F3EF1-8893-490D-A3AB-C530E066D8AB},1pub"
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 11 May 2022 18:02:13 GMT
SPRequestGuid: 7dccf3a0-3f2a-60e3-f8e8-441125c403b1
request-id: 7dccf3a0-3f2a-60e3-f8e8-441125c403b1
X-FRAME-OPTIONS: SAMEORIGIN
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Date: Sat, 02 Dec 2023 12:57:29 GMT
Content-Type: application/javascript
ETag: "0addd628b0da1:0"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Mon, 16 Oct 2023 23:49:22 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 834
Date: Sat, 02 Dec 2023 12:57:29 GMT
Content-Type: image/x-icon
ETag: "{2F7B0976-DEBF-417F-84DA-87455D07155A},1pub"
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 11 May 2022 18:01:45 GMT
SPRequestGuid: 7dccf3a0-ef61-60e3-f8e8-43053b019b36
request-id: 7dccf3a0-ef61-60e3-f8e8-43053b019b36
X-FRAME-OPTIONS: SAMEORIGIN
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding

HTTP/1.1 200 OK
Connection: Keep-Alive
Date: Sat, 02 Dec 2023 12:57:29 GMT
Content-Type: image/png
ETag: "{D022980E-32A8-4C14-A13C-5E5C8747FC3C},1pub"
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 11 May 2022 18:01:45 GMT
SPRequestGuid: 7dccf3a0-ef61-60e3-f8e8-42376cc2073a
request-id: 7dccf3a0-ef61-60e3-f8e8-42376cc2073a
X-FRAME-OPTIONS: SAMEORIGIN
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;, block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Date: Sat, 02 Dec 2023 12:57:30 GMT
Content-Type: application/javascript
ETag: "0318d3cce0da1:0"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Tue, 17 Oct 2023 07:47:54 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Date: Sat, 02 Dec 2023 12:57:31 GMT
Content-Type: application/javascript
ETag: "0b82040ce0da1:0"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Tue, 17 Oct 2023 07:48:00 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Date: Sat, 02 Dec 2023 12:57:31 GMT
Content-Type: application/javascript
ETag: "045c3bce0da1:0"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Tue, 17 Oct 2023 07:47:52 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4

HTTP/1.1 200 OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Date: Sat, 02 Dec 2023 12:57:33 GMT
Content-Type: application/javascript
ETag: "05ebe3dce0da1:0"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Tue, 17 Oct 2023 07:47:56 GMT
X-Content-Type-Options: nosniff
X-MS-InvokeApp: 1; RequireReadOnly
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000 ;
Permissions-Policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), usb=(), fullscreen=(self)
Content-Security-Policy: block-all-mixed-content; connect-src 'self' services.thelist.tas.gov.au *.googleapis.com *.google-analytics.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.sproutlabs.com.au wss: *.hotjar.com cdnjs.cloudflare.com cdn.jsdelivr.net; default-src 'none'; font-src 'self' data: application/font-woff *.gstatic.com *.bootstrapcdn.com cdnjs.cloudflare.com; frame-src 'self' *.hotjar.com *.google.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.surveymonkey.com *.createsend1.com *.tas.gov.au *.vimeo.com zingtree.com nre.snapforms.com.au; img-src 'self' *.tas.gov.au *.openstreetmap.org i.ytimg.com prod.smassets.net data: www.google-analytics.com *.google.com *.gstatic.com *.googleapis.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' *.tas.gov.au *.google.com *.googleapis.com *.surveymonkey.com www.google-analytics.com www.googletagmanager.com *.gstatic.com *.facebook.net *.createsend1.com *.hotjar.com *.jwpcdn.com *.ravenjs.com code.jquery.com cdnjs.cloudflare.com *.bootstrapcdn.com zingtree.com cdn.jsdelivr.net cdn.jsdelivr.net nre.snapforms.com.au 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com code.jquery.com *.jwpcdn.com *.bootstrapcdn.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';
Expect-CT: enforce, max-age=900
SPWeb: 4