Content-Type
GET, OPTIONS
Request-Context
no-cache
keep-alive
gzip
23816
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org code.jquery.com https://www.googletagmanager.com https://www.tagmanager.google.com https://player.vimeo.com/video/334043103 https://offers.cbhs.com.au/ https://*.abtasty.com/ https://ad.doubleclick.net/ https://secure.adnxs.com https://acdn.adnxs.com/dmp/up/pixie.js https://www.googletagservices.com/ https://websites.cdn.getfeedback.com/embed/sYWuqaB7LH/gf.js https://www.getfeedback.com/e/R3BSQ3B0 https://cdn.botframework.com/botframework-webchat/4.13.0/webchat.js https://chatbot.cbhs.com.au/api/directlinetoken https://snap.licdn.com/li.lms-analytics/insight.min.js https://pagead2.googlesyndication.com/pagead/js/r20220425/r20110914/elements/html/omrhp.js https://px.ads.linkedin.com/collect https://sslwidget.criteo.com https://gum.criteo.com *.callrail.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://www.googletagmanager.com https://offers.cbhs.com.au/ https://*.abtasty.com/; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://*.abtasty.com/; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com https://*.abtasty.com/ https://www.google.com/ads/ga-audiences https://www.google.com.au/ads/ga-audiences https://*.doubleclick.net https://px.ads.linkedin.com/collect https://ib.adnxs.com/ https://visitor.omnitagjs.com/ https://exchange.mediavine.com/ https://sync-t1.taboola.com/ https://sync-criteo.ads.yieldmo.com/ https://criteo-sync.teads.tv/ https://sync.outbrain.com/ ad.360yield.com ad.yieldlab.net ade.clmbtech.com adgen.socdm.com ads.stickyadstv.com adx.dable.io c.bing.com contextual.media.net cs.adingo.jp *.criteo.com eb2.3lift.com idsync.rlcdn.com ih.adscale.de match.sharethrough.com pixel.rubiconproject.com r.casalemedia.com rtb-csync.smartadserver s.ad.smaato simage2.pubmatic.com sync.aralego.com tg.socdm.com ups.analytics.yahoo x.bidswitch.net p.adsymptotic.com s.ad.smaato.net rtb-csync.smartadserver.com ups.analytics.yahoo.com s.ad.smaato.net rtb-csync.smartadserver.com ups.analytics.yahoo.com tags.bluekai.com beacon.krxd.net cdn.aralego.net cotads.adscale.de cdn.aralego.net cotads.adscale.de usersync.octillion.tv; media-src 'self' data: blob:; frame-src 'self' https://www.nab.com.au https://www.healthshare.com.au https://test.salesforce.com https://www.youtube.com https://cbhs--sit.my.salesforce.com https://www.whitecoat.com.au https://www.ahsa.com.au https://cbhs--uat.my.salesforce.com https://cbhs--uat.cs137.my.salesforce.com https://webto.salesforce.com/servlet/servlet.WebToCase?encoding=UTF-8 https://webto.salesforce.com/servlet/servlet.WebToLead?encoding=UTF-8 https://www.googletagmanager.com https://www.tagmanager.google.com https://player.vimeo.com https://offers.cbhs.com.au/ https://members.cbhs.com.au/ https://uat.cbhs.com.au/ https://*.doubleclick.net/ https://www.getfeedback.com/* https://www.getfeedback.com/e/* https://www.getfeedback.com/e/bHmYasx3?gf_embed_origin=https%3A%2F%2Fdfs4.cbhs.com.au&gf_multichannel_embed=true&webpage_url=https%3A%2F%2Fdfs4.cbhs.com.au%2Fproduct-results https://www.getfeedback.com/e/R3BSQ3B0 https://*.abtasty.com/ https://chatbot.cbhs.com.au/api/directlinetoken https://gum.criteo.com; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://www.cbhs.com.au/ https://*.abtasty.com/ https://chatbot.cbhs.com.au/api/directlinetoken; connect-src 'self' https://analytics.google.com accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com https://health.cbhs.website:80/I3Root/Server1/websvcs/serverConfiguration https://health.cbhs.website:80/I3Root/Server2/websvcs/serverConfiguration https://ictest.cbhs.com.au/CBHS-ICTEST/ https://www.googletagmanager.com https://offers.cbhs.com.au/77e33a2c4e0120e82889698a199cd1bc.js https://*.abtasty.com/ https://googleads4.g.doubleclick.net/ https://*.doubleclick.net https://www.google-analytics.com https://cgrp-carey-appservice.azurewebsites.net https://cdn.botframework.com/botframework-webchat/4.13.0/webchat.js *.botframework.com/v3/directline/conversations* wss://directline.botframework.com https://directline.botframework.com https://*.abtasty.com/ https://chatbot.cbhs.com.au/api/directlinetoken https://dis.criteo.com/ https://visitor-fra02.omnitagjs.com/ https://gum.criteo.com/ https://pagead2.googlesyndication.com/pagead/js/r20220728/r20110914/elements/html/omrhp.js https://*.callrail.com;
text/html; charset=utf-8
Wed, 10 Jan 2024 04:03:28 GMT
-1
no-cache
no-referrer-when-downgrade
appId=cid-v1:4715f560-6129-4073-bd08-a6b3569f0220
ApplicationGatewayAffinityCORS=a5eb318e336ee6e4b7afceac7eb9bb49; Path=/; SameSite=None; Secure; httponly, ApplicationGatewayAffinity=a5eb318e336ee6e4b7afceac7eb9bb49; Path=/; secure; httponly, ARRAffinity=f6261752b16a2c136b88ce061564d342ee9249da32136c3cfea73fc09b1dcc68;Path=/;HttpOnly;Secure;Domain=cgrp-webapp.azurewebsites.net, ARRAffinitySameSite=f6261752b16a2c136b88ce061564d342ee9249da32136c3cfea73fc09b1dcc68;Path=/;HttpOnly;SameSite=None;Secure;Domain=cgrp-webapp.azurewebsites.net, RS=V_570166223; Path=/; httponly;, TS01b2a25a=0105b6b7b6587277844df6aa36400bf1fd6eecebc6ab829f2f757f2fbaa0a7d481f8dcc8c2c2599561f2f57e356f48581429a8b41e; Path=/; Secure; HTTPOnly, TS0163a66c=0105b6b7b6587277844df6aa36400bf1fd6eecebc6ab829f2f757f2fbaa0a7d481f8dcc8c2c2599561f2f57e356f48581429a8b41e; path=/; domain=cgrp-webapp.azurewebsites.net; HTTPonly; Secure
max-age=63072000
Accept-Encoding
nosniff
SAMEORIGIN
1; mode=block
|