Cache-Control: private
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: 0
Last-Modified: Thu, 19 Mar 2020 03:07:27 GMT
Vary: Accept-Encoding
Server: 
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: *
Content-Security-Policy: default-src 'self' data: https://*.willyweather.com.au/ https://f1-as.readspeaker.com/ https://admin.resonline.com.au/ https://gadgets.securetravelpayments.com/ https://scontent.cdninstagram.com/ https://googleads.g.doubleclick.net/ https://propimages1.roamfree.com/ https://manager.smartlook.com/ https://*.fbcdn.net/ https://*.hotjar.com/ https://weatherwidget.io/ https://staticxx.facebook.com/ https://www.facebook.com/ https://stats.g.doubleclick.net/ https://*.googleapis.com/ https://*.typekit.net https://*.sparkcms.com.au https://kendo.cdn.telerik.com https://*.gstatic.com https://*.google.com https://*.google.com.au https://*.youtube.com https://player.vimeo.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.zencdn.net/ https://gadgets.securetravelpayments.com/ https://*.typekit.net https://f1-as.readspeaker.com/ https://cdnjs.cloudflare.com https://*.google.com https://*.googleapis.com/ https://*.sparkcms.com.au https://kendo.cdn.telerik.com/ https://fonts.gstatic.com/ https://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.typekit.net/ https://cdnjs.cloudflare.com https://sjp.resonline.com.au/ https://gadgets.securetravelpayments.com/ https://graph.facebook.com/ https://f1-as.readspeaker.com/ https://*.hotjar.com/ https://*.zencdn.net/ https://*.sparkcms.com.au https://rec.smartlook.com/ https://api.instagram.com/  https://www.googleadservices.com/ https://connect.facebook.net/ https://weatherwidget.io/ https://kendo.cdn.telerik.com https://*.google.com https://*.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.typekit.net https://*.sparkcms.com.au https://kendo.cdn.telerik.com https://*.gstatic.com https://*.googleapis.com https://maxcdn.bootstrapcdn.com data:
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Mon, 07 Dec 2020 16:21:13 GMT
Set-Cookie: BNI_SparkCMSLB=000000000000000000000000820aff0a0000bb01; Path=/; Max-age=1200; Expires=Mon, 07 Dec 2020 16:46:17 GMT; Secure; HttpOnly
x-encoded-content-encoding: gzip
x-encoded-content-length: 24480