HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self'; img-src 'self' 'unsafe-inline' * data: www.w3.org; frame-src 'self' sjpdigital.fra1.qualtrics.com *.qualtrics.com embed.acast.com surveys.sjp.co.uk consent-pref.trustarc.com bid.g.doubleclick.net cdn.userway.org view.ceros.com consent.trustarc.com aax-eu.amazon-adsystem.com staticcontents.investis.com vars.hotjar.com in.hotjar.com *.fls.doubleclick.net www.youtube.com www.google.com sjp.getmediamanager.com careers.sjp.co.uk irs.tools.investis.com otp.tools.investis.com staging-digital.feprecisionplus.com digital.feprecisionplus.com sjp-forms.dp-staging.investis.com sjp.hireserve-test.com sls-sjp.cs110.force.com www3.sjp.co.uk go.pardot.com sjp.force.com sjp.secure.force.com sjp-corp.staging.investis.com sjp-corp.production.investis.com sjp.co.uk my.visme.co a.visme.co player.acast.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' tagmanager.google.com viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com consent.trustarc.com; font-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com consent.trustarc.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' htts://player.acast.com *.qualtrics.com https://view.ceros.com https://api.userway.org https://cdn.userway.org https://snap.licdn.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://aax-eu.amazon-adsystem.com/ https://cdn.ampproject.org https://diversityprojectcharity.org https://cdn.jsdelivr.net https://gateway.zscloud.net tagmanager.google.com https://stats.g.doubleclick.net https://in.hotjar.com https://vc.hotjar.io cdnjs.cloudflare.com https://www.facebook.com vars.hotjar.com in.hotjar.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net sjp.getmediamanager.com *.googletagmanager.com *.google-analytics.com sjs.bizographics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com my.visme.co a.visme.co https://my.visme.co http://my.visme.co https://a.visme.co http://a.visme.co consent.trustarc.com; media-src 'self'; connect-src 'self' maps.googleapis.com maps.google.com wss://ws18.hotjar.com wss://ws9.hotjar.com wss://*.hotjar.com *.hotjar.com *.qualtrics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://bam.nr-data.net https://in.hotjar.com https://vc.hotjar.io https://my.visme.co http://my.visme.co https://a.visme.co http://a.visme.co https://api.edq.com https://ict.infinity-tracking.net https://cdn.userway.org https://api.userway.org consent.trustarc.com https://www.google-analytics.com;
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), gyroscope=(), magnetometer=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), usb=(), web-share=(), xr-spatial-tracking=()
Date: Wed, 16 Feb 2022 09:15:53 GMT
Content-Length: 48375
Connection: keep-alive
Set-Cookie: AWSALB=TVNuoRiz/lwQYioH/vaMVs/atwWouIi7v1pURz1d5hlU6x8vWzR789ia5FOJSkolNQLo84kqxxqAZKelixXiHXYOJW1DFhjhqEQH5yqE55AY+CRYfeD72q07tUAu; Expires=Wed, 23 Feb 2022 09:15:53 GMT; Path=/
Set-Cookie: AWSALBCORS=TVNuoRiz/lwQYioH/vaMVs/atwWouIi7v1pURz1d5hlU6x8vWzR789ia5FOJSkolNQLo84kqxxqAZKelixXiHXYOJW1DFhjhqEQH5yqE55AY+CRYfeD72q07tUAu; Expires=Wed, 23 Feb 2022 09:15:53 GMT; Path=/; SameSite=None; Secure
Set-Cookie: ASP.NET_SessionId=5odryfacylefggnkmhrubb22; path=/; secure; HttpOnly; SameSite=Lax