sign.ac.uk website report

HTTP/2 200
date: Thu, 22 Oct 2026 21:03:15 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: private, no-transform
server: rocket
strict-transport-security: max-age=63072000
reporting-endpoints: default="https://web-reports.scot.nhs.uk/api/v2/default", csp-endpoint="https://web-reports.scot.nhs.uk/api/v2/csp-report", coep-endpoint="https://web-reports.scot.nhs.uk/api/v2/coep-report", coop-endpoint="https://web-reports.scot.nhs.uk/api/v2/coop-report", perm-endpoint="https://web-reports.scot.nhs.uk/api/v2/perm-report"
report-to: {"endpoints": [{"url": "https://web-reports.scot.nhs.uk/api/v1/nel-report"}], "group": "nel-endpoint", "include_subdomains": false, "max-age": 2592000}
content-security-policy: frame-ancestors 'self' *.scot.nhs.uk *.nhsgrampian.org *.nhslothian.scot *.nhsggc.scot hcaptcha.com *.hcaptcha.com; upgrade-insecure-requests; report-to csp-endpoint; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report
content-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: logger.scot.nhs.uk *.fontawesome.com use.typekit.net *.google.com *.google.co.uk *.googleapis.com themes.googleusercontent.com *.gstatic.com code.jquery.com yui.yahooapis.com *.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net unpkg.com *.twitter.com *.twimg.com *.youtube.com youtu.be *.ytimg.com www.youtube-nocookie.com player.vimeo.com i.vimeocdn.com cdn.jwplayer.com content.jwplatform.com prd.jwpltx.com *.jwpcdn.com *.jwpsrv.com *.civiccomputing.com cc.cdn.civiccomputing.com secure.gravatar.com public.tableau.com www.openstreetmap.org browser-update.org s.w.org www.geoplugin.net *.wp.com hcaptcha.com *.hcaptcha.com www.careopinion.org.uk www.patientopinion.org.uk assets.nhs.uk www.travelinescotland.com api.mapbox.com; worker-src 'self' www.google.com; frame-ancestors 'self'; base-uri 'self'; report-to csp-endpoint; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report
cross-origin-embedder-policy-report-only: require-corp; report-to=coep-endpoint
cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to=coop-endpoint
nel: {"failure_fraction": 1.0, "include_subdomains": false, "max_age": 1800, "report_to": "nel-endpoint", "success_fraction": 0.0}
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),usb=(); report-to=perm-endpoint
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
content-encoding: br