img-src 'self' https://www.google.com/recaptcha/ https://csi.gstatic.com script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.facebook.com a.disquscdn.com/embed.js https://app3.salesmanago.pl/ Date: Mon, 26 Mar 2018 03:35:25 GMT ; Content-Security-Policy: https://ajax.googleapis.com https://www.google-analytics.com Content-Type: text/html; charset=UTF-8 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block https://mapka.paczkawruchu.pl/ Server: #GTFO from headers. Sincerely @piotron hashtagsecurity.disqus.com code.jquery.com https://www.gstatic.com/recaptcha/ referrer.disqus.com/juggler/stat.gif https://maps.gstatic.com/ https://mapa.ecommerce.poczta-polska.pl/widget/scripts/ https://ssl.google-analytics.com X-Content-Type-Options: nosniff ; https://maps.googleapis.com/ Transfer-Encoding: chunked Cache-Control: no-cache https://www.google-analytics.com Connection: keep-alive https://ssl.google-analytics.com https://s-static.ak.facebook.com https://gindie.disqus.com/embed.js Set-Cookie: laravel_session=eyJpdiI6IkgyVU5FSDhYOHBmNXdueG1KUkJ5OWc9PSIsInZhbHVlIjoiQm5cL2JvdW9uT1h4RlVoblc1Y3lRbGJCRnIxaUxtcmlzNGJlWUtXbG1wTUg2bDNVRWJOTlRXTkJYTGtcL0VaZTdRMnpxamVGdjNEXC9VbXhlZmx6Z2x5U0E9PSIsIm1hYyI6ImJiM2Q4MmEyNDUzYmFmZTg5OTljY2MzNDhjZjgwNzU5MDNkMWFiZWM4OWIxZmQ0MGUwZWU3YjNiYjM1YWI0NGMifQ%3D%3D; expires=Mon, 26-Mar-2018 05:35:25 GMT; Max-Age=7200; path=/; HttpOnly default-src 'self'; Set-Cookie: XSRF-TOKEN=eyJpdiI6Im13MWg3dlVldW9JOVp3b0hZbU1FQVE9PSIsInZhbHVlIjoiTXNxQ2NNaTJReEZ1ZkNrTDFhNDFEV0pSaGRkdTJHdEgzZVI2Z0RBQUpwdmdTa3dxY0xiZVZoNkhkM2RQQ25RN0Z5MG5vZzJhU2w5OUJlcXRFaVFKT3c9PSIsIm1hYyI6IjhjOTkzOGRlN2MwZWJmNDcxNDE2Yjg0NzAyOTFmNjlmZjI4M2E2NGViOGY1Njg2OTUzNzJjMmNkMTU1MTE0ZTEifQ%3D%3D; expires=Mon, 26-Mar-2018 05:35:25 GMT; Max-Age=7200; path=/; HttpOnly HTTP/1.1 200 OK connect-src 'self' a.disquscdn.com/next/assets/img/ https://app3.salesmanago.pl/ https://connect.facebook.net https://maps.google.com/ ; https://dl.dropboxusercontent.com ; ; disqus.com/embed/comments/ https://maps.google.com Strict-Transport-Security: max-age=31536000; includeSubDomains font-src 'self' https://mapa.ecommerce.poczta-polska.pl/widget/ https://maps.google.com/ https://themes.googleusercontent.com https://mapka.paczkawruchu.pl/ style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Frame-Options: SAMEORIGIN https://s-static.ak.facebook.com https://fonts.gstatic.com frame-src 'self' ; X-Content-Type-Options: nosniff a.disquscdn.com https://csi.gstatic.com https://www.facebook.com https://mapka.paczkawruchu.pl/ https://www.google.com/recaptcha/ object-src 'none' https://maps.google.com/ https://maps.googleapis.com/ https://stats.g.doubleclick.net/ https://app3.salesmanago.pl/