Server: Apache Cache-Control: max-age=0, must-revalidate, private Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Strict-Transport-Security: max-age=604800; includeSubDomains X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff HTTP/1.1 200 OK X-Content-Security-Policy: default-src 'self' localhost maps.googleapis.com wss://s7.smartsupp.com s7.smartsupp.com smartsupp-widget-161959.c.cdn77.org themes.googleusercontent.com s2.smartlook.com writer.smartlook.com https://fonts.gstatic.com https://static.mkonferencja.pl https://writer-mobile.smartlook.com https://fullstory.com https://r.fullstory.com; block-all-mixed-content; child-src www.youtube.com staticxx.facebook.com https://static.mkonferencja.pl https://googleads.g.doubleclick.net https://www.google.com https://www.google.pl https://bid.g.doubleclick.net https://www.youtube.com; connect-src 'self' https://heapanalytics.com https://fullstory.com https://r.fullstory.com https://rs.fullstory.com https://s7.smartsupp.com wss://s7.smartsupp.com maps.googleapis.com; font-src 'self' devmkonferencja https://static.mkonferencja.pl https://static.mconference.eu https://static.mconference.us https://heapanalytics.com https://fonts.gstatic.com https://smartsupp-widget-161959.c.cdn77.org https://use.typekit.net; img-src 'self' data: blob: devmkonferencja cdn.heapanalytics.com google-analytics.com fonts.googleapis.com csi.gstatic.com maps.google.com maps.gstatic.com maps.googleapis.com http://maps.googleapis.com www.facebook.com static.smartsupp.co www.google-analytics.com heapanalytics.com web.facebook.com https://static.mkonferencja.pl https://heapanalytics.com https://p.typekit.net developers.google.com; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' data: devmkonferencja cdn.heapanalytics.com google-analytics.com fonts.googleapis.com csi.gstatic.com maps.google.com maps.gstatic.com maps.googleapis.com www.smartsuppchat.com www.google-analytics.com connect.facebook.net ajax.googleapis.com smartsupp-widget-161959.c.cdn77.org rec.smartlook.com www.gstatic.com https://static.mkonferencja.pl https://www.googleadservices.com https://rec-src.smartlook.com https://fullstory.com https://heapanalytics.com https://cdn.heapanalytics.com https://use.typekit.net developers.google.com; style-src 'self' 'unsafe-inline' devmkonferencja fonts.googleapis.com smartsupp-widget-161959.c.cdn77.org www.gstatic.com https://static.mkonferencja.pl https://heapanalytics.com; report-uri /nelmio/csp/report Date: Sun, 28 Jan 2018 10:46:37 GMT Access-Control-Allow-Credentials: true X-Frame-Options: DENY Connection: Upgrade Set-Cookie: PHPSESSID=f9da8313dfac75874ec697f47dd5d14e; expires=Sun, 04-Feb-2018 10:46:37 GMT; Max-Age=604800; path=/; secure; HttpOnly Content-Type: text/html; charset=UTF-8 Upgrade: h2,h2c Content-Security-Policy: default-src 'self' localhost maps.googleapis.com wss://s7.smartsupp.com s7.smartsupp.com smartsupp-widget-161959.c.cdn77.org themes.googleusercontent.com s2.smartlook.com writer.smartlook.com https://fonts.gstatic.com https://static.mkonferencja.pl https://writer-mobile.smartlook.com https://fullstory.com https://r.fullstory.com; block-all-mixed-content; child-src www.youtube.com staticxx.facebook.com https://static.mkonferencja.pl https://googleads.g.doubleclick.net https://www.google.com https://www.google.pl https://bid.g.doubleclick.net https://www.youtube.com; connect-src 'self' https://heapanalytics.com https://fullstory.com https://r.fullstory.com https://rs.fullstory.com https://s7.smartsupp.com wss://s7.smartsupp.com maps.googleapis.com; font-src 'self' devmkonferencja https://static.mkonferencja.pl https://static.mconference.eu https://static.mconference.us https://heapanalytics.com https://fonts.gstatic.com https://smartsupp-widget-161959.c.cdn77.org https://use.typekit.net; img-src 'self' data: blob: devmkonferencja cdn.heapanalytics.com google-analytics.com fonts.googleapis.com csi.gstatic.com maps.google.com maps.gstatic.com maps.googleapis.com http://maps.googleapis.com www.facebook.com static.smartsupp.co www.google-analytics.com heapanalytics.com web.facebook.com https://static.mkonferencja.pl https://heapanalytics.com https://p.typekit.net developers.google.com; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' data: devmkonferencja cdn.heapanalytics.com google-analytics.com fonts.googleapis.com csi.gstatic.com maps.google.com maps.gstatic.com maps.googleapis.com www.smartsuppchat.com www.google-analytics.com connect.facebook.net ajax.googleapis.com smartsupp-widget-161959.c.cdn77.org rec.smartlook.com www.gstatic.com https://static.mkonferencja.pl https://www.googleadservices.com https://rec-src.smartlook.com https://fullstory.com https://heapanalytics.com https://cdn.heapanalytics.com https://use.typekit.net developers.google.com; style-src 'self' 'unsafe-inline' devmkonferencja fonts.googleapis.com smartsupp-widget-161959.c.cdn77.org www.gstatic.com https://static.mkonferencja.pl https://heapanalytics.com; report-uri /nelmio/csp/report