chcf.org Review

 N/A

HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Server: Pantheon
Location: https://www.chcf.org/
X-Pantheon-Redirect: primary-domain-policy-doc
Date: Tue, 19 Aug 2025 03:39:14 GMT
X-Served-By: cache-tyo11975-TYO
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1755574755.551218,VS0,VE8
Age: 0
Accept-Ranges: bytes
Via: 1.1 varnish

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 49913
Cache-Control: public, max-age=604800
Content-Encoding: gzip
Content-Security-Policy-Report-Only: default-src 'self' http: https://*-chcf-wp.pantheonsite.io/ https://chcf-wp.ddev.site https://*.addthis.com https://*.youtube.com; script-src 'unsafe-inline' 'unsafe-eval' http: https://*.google.com https://fonts.googleapis.com https://ajax.googleapis.com https://jnn-pa.googleapis.com https://*.googletagmanager.com https://*.youtube.com https://*.addthis.com https://*.google-analytics.com https://*.ytimg.com https://*.moatads.com https://*.doubleclick.net https://*.addthisedge.com https://cdnjs.cloudflare.com; style-src 'unsafe-inline' http: https://*.google.com https://fonts.googleapis.com https://ajax.googleapis.com https://jnn-pa.googleapis.com https://*.youtube.com; img-src 'self' http: data: https://*.ytimg.com https://*.ggpht.com https://*.gstatic.com https://*.google-analytics.com; connect-src 'self' https://*.google-analytics.com https://*.bookingbug.com https://geolocation.onetrust.com https://*.cookielaw.org https://fonts.googleapis.com https://ajax.googleapis.com https://jnn-pa.googleapis.com *.addtoany.com; font-src 'self' data: fonts.gstatic.com use.typekit.net use.fontawesome.com bespoke.bookingbug.com; media-src 'self' *.youtube.com *.vimeo.com *.akamaized.net; report-uri 'self'; child-src 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'self'; frame-src 'self' blob: *.youtube.com *.youtube-nocookie.com *.doubleclick.net *.soundcloud.com *.facebook.com *.vimeo.com *.addtoany.com *.infogram.com *.simplecast.com; worker-src 'self'; manifest-src 'self'; navigate-to 'self'; prefetch-src 'self'; upgrade-insecure-requests
Content-Type: text/html; charset=UTF-8
Link: ; rel="https://api.w.org/"
Link: ; rel="alternate"; title="JSON"; type="application/json"
Link: ; rel=shortlink
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=*, geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-script=(), sync-xhr=(), usb=(), vertical-scroll=(), web-share=*, xr-spatial-tracking=()
Referrer-Policy: strict-origin-when-cross-origin
Server: nginx
Strict-Transport-Security: max-age=31622400; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Pantheon-Styx-Hostname: styx-fe4-a-8555c9b7f7-jzldb
X-Styx-Req-Id: 3ee955d6-7c8a-11f0-a4df-cefbf28b987a
X-Xss-Protection: 1
Date: Tue, 19 Aug 2025 03:39:15 GMT
X-Served-By: cache-chi-kigq8000086-CHI, cache-tyo11933-TYO
X-Cache: HIT, HIT
X-Cache-Hits: 15, 2
X-Timer: S1755574755.468969,VS0,VE8
Vary: Accept-Encoding, Cookie, Cookie
Age: 15390
Accept-Ranges: bytes
Via: 1.1 varnish, 1.1 varnish