HTTP/2 200 date: Sat, 04 Oct 2025 15:17:12 GMT content-type: text/html; charset=utf-8 cf-ray: 9895a50c6ccc6f7a-BLR cf-cache-status: EXPIRED cache-control: max-age=43200 content-language: en last-modified: Sat, 04 Oct 2025 15:17:12 GMT server: cloudflare strict-transport-security: max-age=16070400; includeSubDomains vary: Cookie, Accept-Encoding, origin via: 2.0 heroku-router content-security-policy: script-src 'self' 'unsafe-inline' *.paypalobjects.com https://www.google-analytics.com/analytics.js https://*.shpg.org/ https://comments.mozillafoundation.org/ https://airtable.com https://platform.twitter.com https://cdn.syndication.twimg.com https://assets.mofoprod.net/static/ https://embed.typeform.com https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/debug/bootstrap https://www.googletagmanager.com/debug/badge https://tagmanager.google.com *.googletagmanager.com https://cdn.commento.io/js/commento.js https://js.tito.io https://js-plugins.tito.io/gtm.js https://checkout.tito.io *.stripe.com m.stripe.network *.fundraiseup.com *.plaid.com *.src.mastercard.com *.checkout.visa.com pay.google.com *.paypal.com https://mozillafoundation.tfaforms.net https://cdn.cookielaw.org 'unsafe-eval' 'nonce-A9i2UMczduxfO+cFSmY4GQ=='; child-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self'; frame-src 'self' 'unsafe-inline' *.paypalobjects.com https://www.youtube.com https://comments.mozillafoundation.org/ https://airtable.com https://docs.google.com/ https://platform.twitter.com https://public.zenkit.com https://calendar.google.com https://www.youtube-nocookie.com https://devopstypeform.typeform.com https://player.vimeo.com https://mofo-infographics.s3.amazonaws.com https://form.typeform.com https://js.tito.io https://checkout.tito.io https://anchor.fm https://datawrapper.dwcdn.net https://player.simplecast.com *.fundraiseup.com *.stripe.com *.plaid.com *.paypal.com pay.google.com https://logwork.com https://rbsteed.com https://vimeo.com https://www.google.com/recaptcha/; worker-src 'self'; connect-src *; media-src 'self' https://s3.amazonaws.com/mofo-assets/foundation/video/ https://assets.mofoprod.net/static/ https://assets.mofoprod.net/network/media/ https://player.vimeo.com/ https://*.akamaized.net/ https://*.vimeocdn.com/; style-src 'self' 'unsafe-inline' https://code.cdn.mozilla.net https://fonts.googleapis.com https://tagmanager.google.com https://platform.twitter.com https://assets.mofoprod.net/static/ https://cdn.commento.io/css/commento.css https://www.googletagmanager.com/debug/badge.css https://js.tito.io https://cdnjs.cloudflare.com/ajax/libs/gsap/3.8.0/gsap.min.js https://cdnjs.cloudflare.com/ajax/libs/gsap/3.8.0/ScrollTrigger.min.js https://mozillafoundation.tfaforms.net https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css; default-src 'none'; img-src * data: blob: https://*.fundraiseup.com carview.php?tsp=https://ucarecdn.com https://pay.google.com https://*.paypalobjects.com; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://code.cdn.mozilla.net https://assets.mofoprod.net/static/ https://cdn.commento.io/fonts/ *.fundraiseup.com *.stripe.com data: https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/ cross-origin-opener-policy: same-origin-allow-popups nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1} referrer-policy: strict-origin-when-cross-origin report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=oKgTyeYiQcMOF2J9kRYHuGoIQ1b6mGBWGvPDhHsFGnk%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1759591032"}],"max_age":3600} reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=oKgTyeYiQcMOF2J9kRYHuGoIQ1b6mGBWGvPDhHsFGnk%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1759591032" x-content-type-options: nosniff x-frame-options: DENY content-encoding: gzip