cept-Encoding, Origin x-content-type-options: nosniff timing-allow-origin: * access-control-allow-origin: https://dashboard.stripe.com content-length: 2909 X-Firefox-Spdy: h2