wfp.org Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 28 Aug 2025 11:11:04 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.wfp.org/

HTTP/1.1 200 OK
Date: Thu, 28 Aug 2025 11:11:06 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 16732
Connection: keep-alive
Server: Apache
Cache-Control: must-revalidate, no-cache, private
X-Drupal-Dynamic-Cache: UNCACHEABLE (poor cacheability)
Link: ; rel="alternate"; hreflang="en", ; rel="alternate"; hreflang="ar", ; rel="alternate"; hreflang="fr", ; rel="alternate"; hreflang="es", ; rel="alternate"; hreflang="zh-hans", ; rel="alternate"; hreflang="fa", ; rel="alternate"; hreflang="de", ; rel="alternate"; hreflang="it", ; rel="alternate"; hreflang="ja", ; rel="alternate"; hreflang="ko", ; rel="alternate"; hreflang="ru"
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Content-Security-Policy: default-src 'self'; script-src 'self' analytics.tiktok.com wcs.naver.net *.spring.wfp.org cdn.wfp.org *.jwplatform.com www.google.com *.googletagmanager.com tagmanager.google.com *.google-analytics.com survey.g.doubleclick.net *.doubleclick.net *.adalyser.com *.jwpcdn.com www.gstatic.com adservice.google.com connect.facebook.net www.facebook.com squizlabs.github.io cdnjs.cloudflare.com unpkg.com cdn.sparkcentral.com *.smooch.io *.user1st.info www.googleadservices.com bat.bing.com sixeleven.involve.me assets.juicer.io *.typekit.net *.hotjar.com *.hotjar.io platform.twitter.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com https://pagead2.googlesyndication.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.spring.wfp.org cdn.wfp.org tagmanager.google.com fonts.googleapis.com *.bootstrapcdn.com squizlabs.github.io cdn.sparkcentral.com *.user1st.info assets.juicer.io *.typekit.net; img-src 'self' blob: https: data:; media-src 'self' content.jwplatform.com *.jwpsrv.com cdn.jwplayer.com cdn.sparkcentral.com *.user1st.info blob:; frame-src 'self' *.jwpsrv.com www.google.com survey.g.doubleclick.net *.doubleclick.net cdn.knightlab.com forms.office.com content.jwplatform.com *.user1st.info www.youtube-nocookie.com sixeleven.involve.me saveful.com *.hotjar.com *.hotjar.io datawrapper.dwcdn.net platform.twitter.com a26943920264.cdn.optimizely.com a26943920264.cdn-pci.optimizely.com https://www.googletagmanager.com; child-src 'self' blob:; font-src 'self' cdn.wfp.org *.jwpcdn.com fonts.gstatic.com *.bootstrapcdn.com cdn.sparkcentral.com *.user1st.info static.juicer.io *.typekit.net *.hotjar.com *.hotjar.io data:; connect-src 'self' data: analytics.tiktok.com wcs.naver.com tiles.arcgis.com spring.wfp.org *.spring.wfp.org cdn.wfp.org geonode.wfp.org *.google-analytics.com *.analytics.google.com *.googletagmanager.com analytics.google.com api.mapbox.com geoip.nekudo.com api.ipify.org api.ip2country.info mycountry.picktek.org content.jwplatform.com *.jwpsrv.com cdn.jwplayer.com acr.api.spring.wfp.org cdn.sparkcentral.com *.smooch.io *.user1st.info stats.g.doubleclick.net fh.mg.wfp.org geoip.maxmind.com www.juicer.io juicer.io graph.facebook.com *.typekit.net *.sentry.io bat.bing.com *.hotjar.com *.hotjar.io *.jwpltx.com logx.optimizely.com *.optimizely.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com 'self' ws: https://o274918.ingest.sentry.io/api/5249464/store/ https://o274918.ingest.sentry.io/api/5249464/envelope/; upgrade-insecure-requests
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=2592000
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Access-Control-Expose-Headers: *
X-Drupal-Cache: HIT
Vary: Accept-Encoding,User-Agent,Accept
Content-Encoding: gzip