HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
X-Drupal-Dynamic-Cache: UNCACHEABLE
Link: <https://www.unicef.org/innovation/>; rel="shortlink", <https://www.unicef.org/innovation/>; rel="canonical"
Link: <https://www.unicef.org/innovation/office-innovation>; rel="alternate"; hreflang="en"
Link: <https://www.unicef.org/innovation/office-innovation>; rel="revision"
X-UA-Compatible: IE=edge
Content-Language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 15 Dec 2020 01:39:58 GMT
ETag: "1607996398"
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' unpkg.com *.unicef.org *.sharethis.com rules.quantcount.com connect.facebook.net secure.quantserve.com www.google-analytics.com www.googletagmanager.com cdn.poll-maker.com embeds.tagboard.com maps.googleapis.com e.infogram.com *.hscampaigns.com *.getchute.com ssl.mousestats.com tagmanager.google.com js-agent.newrelic.com bam.nr-data.net js-agent.newrelic.com/* www.youtube.com s.ytimg.com *.instagram.com platform.twitter.com cdn.syndication.twimg.com syndication.twitter.com cdn.nativemsg.com hm.baidu.com optimize.google.com siteimproveanalytics.com downloads.mailchimp.com mc.us2.list-manage.com sjs.bizographics.com unicef.us2.list-manage.com s3.amazonaws.com www.googleadservices.com *.doubleclick.net cdn.curator.io eisi-ext.azurewebsites.net *.aparat.com *.tableau.com *.wufoo.com s.pinimg.com ct.pinterest.com analytics.tiktok.com; object-src 'self' *.youtube.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.sharethis.com cdn.poll-maker.com stories.getchute.com cdn-images.mailchimp.com downloads.mailchimp.com l.sharethis.com platform.twitter.com optimize.google.com *.unicef.org cdn.curator.io *.twimg.com; img-src 'self' data: *.unicef.org www.google-analytics.com ssl.gstatic.com sb.scorecardresearch.com  *.sharethis.com www.facebook.com pixel.quantserve.com stats.g.doubleclick.net www.gstatic.com cdn.poll-maker.com csi.gstatic.com maps.gstatic.com maps.googleapis.com www.google.com *.cdninstagram.com pixel.getchute.com media.chute.io static.getchute.com avatars.io syndication.twitter.com *.twimg.com platform.twitter.com dynamite-images.appspot.com hm.baidu.com www.googletagmanager.com unicef-images.appspot.com 88988.global.siteimproveanalytics.io cdn-images.mailchimp.com gallery.mailchimp.com downloads.mailchimp.com *.tableau.com; media-src 'self' *.cdninstagram.com video.twimg.com; frame-src 'self' *.facebook.com www.google.com *.twitter.com e.infogram.com infogram-download-us2.s3.eu-west-1.amazonaws.com infogram-download-eu.s3.eu-west-1.amazonaws.com *.sharethis.com *.hscampaigns.com embeds.tagboard.com www.youtube.com infogram.com connect.facebook.net *.unicef.org api.getchute.com static.getchute.com giphy.com *.wufoo.com www.instagram.com cdn.nativemsg.com twitter.com *.ustream.tv *.youku.com c.sharethis.mgr.consensu.org optimize.google.com embed.ted.com *.doubleclick.net player.vimeo.com forms.office.com *.aparat.com *.tableau.com oms.gameloft.com; frame-ancestors 'self'; child-src 'self'; font-src 'self' fonts.gstatic.com data: maxcdn.bootstrapcdn.com stories.getchute.com *.unicef.org cdn.curator.io; connect-src 'self' *.sharethis.com www.quiz-maker.com ssl.mousestats.com www.google-analytics.com s3.amazonaws.com getchute.com *.getchute.com c.sharethis.mgr.consensu.org stats.g.doubleclick.net unicefhq.cp.bsd.net script.google.com script.googleusercontent.com *.unicef.org api.curator.io bam.nr-data.net rpapigatewaytest.azurewebsites.net i2e.azurewebsites.net; report-uri /innovation/report-csp-violation
X-XSS-Protection: 1
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Drupal-Cache: HIT
X-Request-ID: v-d445db5e-3ea3-11eb-a31b-9fe5ff7b70b4
X-AH-Environment: prod
X-Cache-Hits: 24
X-Age: 13316
Cache-Control: public, max-age=11545
Expires: Wed, 16 Dec 2020 03:06:41 GMT
Date: Tue, 15 Dec 2020 23:54:16 GMT
Transfer-Encoding:  chunked
Connection: keep-alive
Connection: Transfer-Encoding